Business Information Security Officer

Lufthansa Systems Poland is a recognized provider of IT solutions and services for the aeronautical, logistic, and financial industries. It is part of the Lufthansa Group and implements technological solutions and dedicated services. The role focuses on ensuring the confidentiality, integrity, and availability of information assets for the Flight Planning product line.

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional certifications such as CISSP, CISM, CISA, or CRISC are an advantage.
• Several years of experience in information security management, preferably in a GRC-focused role.
• Strong knowledge of information security frameworks and standards (e.g., ISO 27001, NIST CSF).
• Experience in risk management, vulnerability management, and incident handling.
• Solid understanding of security technologies and best practices.
• Strong project management and organizational skills.
• Excellent communication and stakeholder management abilities.
• Analytical mindset and strong problem-solving skills.
• Fluent English (written and spoken).
• Readiness to work from the office in Gdańsk at least 2 days a week.

• Implement and operationalize information security policies and standards within the product line aligned with the company’s overall security strategy.
• Act as the primary contact between the business area and the central information security organization.
• Manage and maintain the Information Security Management System (ISMS) within an ISO 27001-certified environment.
• Conduct and oversee information security risk assessments and ensure effective risk treatment.
• Identify, assess, and coordinate remediation of technical vulnerabilities, evaluating both technical and business impact.
• Monitor and enforce technical and organizational security controls.
• Investigate and manage security incidents, supporting incident response and mitigation activities.
• Coordinate and support internal and external security audits, ensuring timely closure of findings.
• Prepare and deliver regular security reporting to management.
• Contribute to projects and product changes from a security governance perspective.
• Promote security awareness and coordinate training activities within the product area.

Readiness to work from the office in Gdańsk at least 2 days a week.