Ekspert ds. Cyberbezpieczeństwa – GRC, SecOps

This is a fully remote position, open to applicants in Poland.

📋 Description

• Collaborate with leadership to foster a robust security culture and strategy while adapting corporate standards, including NIST.

• Ensure the organization adheres to essential market and European regulations, such as NIS2, CRA, and RODO.

• Formulate security policies, establish and communicate KPIs to the Management Board, and facilitate security steering committees.

• Create and sustain the cyber-risk map while implementing necessary controls.

• Assist project teams with Security by Design initiatives, conduct architecture reviews, and supervise penetration tests.

• Design, implement, and maintain security infrastructure platforms, particularly EDR/XDR, MFA, and firewalls.

• Continuously assess security effectiveness across servers, workstations, mobile devices, and applications.

• Oversee the vulnerability-management process from detection to remediation in collaboration with IT.

• Analyze security alerts and coordinate with an external SOC to ensure monitoring beyond standard working hours.

• Manage security incidents, including their identification, threat mitigation, remediation, and lessons learned (RETEX).

• Enhance incident-response procedures and organize regular crisis exercises.

• Provide annual organization-wide security-awareness initiatives, including phishing simulations and e-learning modules.

• Share knowledge and conduct specialized security workshops for IT teams.

⛳️ Requirements

• Experience or expertise in cybersecurity governance, risk management, security architecture, SecOps, vulnerability management, detection, and incident response.

• Familiarity with the NIST framework.

• Knowledge of NIS2, CRA, and RODO/GDPR regulations.

• Experience with EDR/XDR solutions, MFA, and firewalls.

• Proven experience in overseeing penetration testing.

• Experience in coordinating with a SOC.

• Experience in conducting phishing simulations and e-learning security training.

• Capability to develop security policies, cyber-risk maps, controls, KPIs, and incident-response procedures.

• Ability to facilitate security workshops for IT teams.

🏝️ Benefits

• Permanent contract & B2B.

• Remote work arrangement.

• Full-time engagement.