Third-Party Cyber Risk & Security Lead – Kraków On-site

INFOPLUS TECHNOLOGIES; Kraków; Vor Ort; PLN 180.000 - 280.000; Vollzeit

Zusammenfassung

INFOPLUS TECHNOLOGIES in Kraków is seeking an experienced specialist to assess and remediate third-party cybersecurity risks, review vendor security evidence, and track compliance with industry standards. The role requires collaboration with Risk, Compliance, Audit and Security stakeholders and an ability to apply robust risk assessment practices.

You will work onsite in Kraków three days per week, contributing to remediation plans and evidence reviews while upholding high standards of

Qualifikationen

• 5+ years of experience in third-party risk assessment, cybersecurity assessments, or regulatory/audit issue closure.
• Strong audit mindset and risk assessment expertise.
• Knowledge of security standards such as NIST, ISO 27001, PCI DSS, COBIT, or SOC 2.
• Excellent communication and analytical skills.
• Bachelor's degree in a relevant field.
• Ability to work onsite in Kraków 3 days per week.

Aufgaben

• Assess and remediate third-party cybersecurity risks and control gaps.
• Review vendor security evidence, risk treatment plans, and remediation actions.
• Evaluate security controls, policies, and procedures against industry standards.
• Track compliance and recommend effective risk mitigation measures.
• Collaborate with Risk, Compliance, Audit, and Security stakeholders.

Kenntnisse

Risk assessment

Audit / regulatory

Third-party risk

Communication

Analytical thinking

Ausbildung

Bachelor's degree in a relevant field

Tools

NIST

ISO 27001

PCI DSS

COBIT

SOC 2

Jobbeschreibung

INFOPLUS TECHNOLOGIES in Kraków is seeking an experienced specialist to assess and remediate third-party cybersecurity risks, review vendor security evidence, and track compliance with industry standards. The role requires collaboration with Risk, Compliance, Audit and Security stakeholders and an ability to apply robust risk assessment practices.

You will work onsite in Kraków three days per week, contributing to remediation plans and evidence reviews while upholding high standards of