This is a fully remote position, open to applicants in Poland.

📋 Description

• Assist in the ongoing enhancement of the Information Security Management System (ISMS), which includes compliance efforts, audit preparations, evidence gathering, risk monitoring, and follow-up on remediation actions.

• Convert security and compliance requirements into actionable technical controls and assess their effectiveness.

• Establish and manage essential security controls within the Microsoft / Entra environment, such as Multi-Factor Authentication (MFA), Conditional Access, role-based access, privileged access practices, access evaluations, endpoint security, and system hardening.

• Oversee security operations, including Cyber Defence Center investigations, vulnerability and patch management, incident response, backup/restore security, ransomware resilience, and evidence for restore-testing.

• Embed security measures into IT operations, change/release management, and service delivery processes.

• Present the security status using Key Performance Indicators (KPIs) like MFA coverage, device compliance, patch status, critical risks, and successful restore-testing.

• Collaborate closely with global IT teams, the Cyber Defence Center, and business stakeholders.

⛳️ Requirements

• Practical experience in IT security, M365/Entra administration, endpoint management, IT operations, or a similar technical position.

• Strong understanding of Microsoft security principles, particularly in identity and access management, endpoint protection, and cloud security.

• Basic to substantial knowledge of ISO 27001 principles, including risk-based controls, policies, evidence collection, and audit readiness.

• Technical expertise in various domains such as Identity and Access Management (IAM), endpoint security, secure access, vulnerability management, logging/SIEM, or backup/recovery solutions.

• A proactive, organized, and practical approach to work.

• Capability to document processes clearly and communicate effectively across IT and business domains.

• Ability to see tasks through to completion.