Tribe Security Officer

Antal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, they employ around 150 professionals who deliver a full range of services including specialist and executive recruitment, employee outsourcing, HR consulting, employer branding, and market research. Their division-based structure combines deep industry expertise with functional specialisation, providing tailored solutions for companies in every sector.

• Minimum 5 years of experience in Cyber Security, Information Security or IT Risk Management
• Strong understanding of cybersecurity principles, IT risks and security governance
• Experience working with application security, vulnerability management or secure software development practices
• Ability to work with multiple stakeholders in an international environment
• Fluent English communication skills
• Strong analytical and problem-solving skills
• Ability to work independently, prioritize tasks and manage deadlines
• Experience working in Agile / DevOps environments

Nice to have:

• Certifications related to cybersecurity or IT risk management (e.g. ISO 27005, ISO 22301, CISSP or similar)
• Experience with security frameworks, compliance processes or audit activities

• Acting as a security point of contact for assigned technology teams and application portfolios
• Supporting implementation of cybersecurity policies, standards and risk management processes
• Identifying, assessing and monitoring IT security risks and defining mitigation actions
• Supporting vulnerability management and remediation activities
• Promoting DevSecOps practices and integrating security into the software development lifecycle
• Supporting security activities such as application security assessments, vulnerability scans, SAST/SCA tools and penetration testing processes
• Reviewing security aspects during project and delivery phases
• Preparing security reporting and providing visibility on risk and vulnerability status
• Supporting internal controls, audits and compliance activities
• Sharing security best practices with technology teams and security stakeholders