Vendor Security Risk Assessor - Hybrid Warsaw

Dotlinkers IT recruitment; Warszawa; Hybrid; PLN 274,000 - 328,000; Full time

Benefits offered by this job

Sports card

Private life insurance

Private medical care

Dental care

Vision allowance

Private pension

Travel insurance

Employee Assistance Program

Educational assistance

Volunteer opportunities

Contract of employment

Job summary

Dotlinkers IT recruitment is seeking a Vendor Due Diligence Specialist for Warsaw, Poland, in a hybrid role. You will conduct technical security assessments of external vendors, review documentation, and validate remediation plans, communicating risk to technical and non-technical stakeholders.

You will evaluate vendor security controls across cloud and on-prem environments, supporting a mature information security program in an international firm.

Qualifications

• At least 5 years of experience in information security, technology risk, security engineering, security architecture or third-party risk management.
• Experience conducting technical security assessments of third-party environments, including evaluating security controls and their effectiveness.
• Bachelor's degree in Information Security, Information Systems, Information Technology or a related field.
• Strong understanding of cloud environments, SaaS solutions, IAM, network security, vulnerability management and data protection.
• Knowledge of logging and monitoring, incident response, application security and technical security controls in complex IT environments.
• Familiarity with security frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001 and SOC 2.
• Ability to analyze technical evidence, challenge vendor statements and independently assess security risks.
• Strong analytical and communication skills, including the ability to explain complex security issues to different audiences.
• Ability to work independently, manage multiple assessments simultaneously and collaborate with cross-functional teams.
• High ethical standards and a responsible approach to handling sensitive information.

Responsibilities

• Act as a technical subject matter expert within the third-party information security risk management program.
• Conduct in-depth security assessments of new and existing vendors that access, process, store or transmit company information.
• Evaluate the design and effectiveness of vendor security controls across different technology environments and service models.
• Analyze business requirements, data flows, system integrations and technical architectures to identify potential security risks.
• Review security documentation, including audit reports, certifications, penetration test results, vulnerability assessments, policies and architecture diagrams.
• Assess controls related to IAM, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response and application security.
• Work with vendors and internal technical teams to validate assessment responses, investigate security gaps and review remediation plans.
• Prepare clear, risk-based assessment reports outlining identified issues, their potential impact and recommended actions.
• Collaborate with Technology, Compliance, Legal, Procurement and other teams to maintain a consistent approach to third-party risk management.
• Continuously improve assessment methodologies, processes, templates and metrics while staying up to date with emerging threats and security best practices.

Skills

InfoSec experience

Third-party risk

Cloud security

Communication skills

Security frameworks

Education

Bachelor's degree

Job description

Dotlinkers IT recruitment is seeking a Vendor Due Diligence Specialist for Warsaw, Poland, in a hybrid role. You will conduct technical security assessments of external vendors, review documentation, and validate remediation plans, communicating risk to technical and non-technical stakeholders.

You will evaluate vendor security controls across cloud and on-prem environments, supporting a mature information security program in an international firm.