Mid-Level Third-Party Cybersecurity Risk Assessor – Security & Compliance

This position is for a leading global financial institution based in Krakow, working within their Cybersecurity team focused on third-party security risk assessment and compliance.

• At least 2 years of experience in cybersecurity or related technical roles.
• Strong knowledge of IT systems, infrastructure, and data security principles.
• Practical experience in third-party security assessment processes, control testing, or audit disciplines.
• Excellent communication skills in business English (fluent) and German (fluent), both verbal and written.
• Proven ability to deliver high-quality results under pressure and pace.
• Skilled in managing and influencing stakeholders from diverse backgrounds and cultures.

Nice to have:

• Relevant cybersecurity certifications such as CISSP, CISM, or CompTIA Security+.
• A genuine enthusiasm for cybersecurity and knowledge-sharing.

• Complete cybersecurity control assurance, security, and risk assessments for third-party engagements.
• Deliver all aspects of Third-Party Security Assessment (TPSA) service and operations, ensuring efficiency and continuous improvement.
• Collaborate effectively with HSBC Business, third-party stakeholders, TPSA region leads, and team members to meet SLAs.
• Ensure assessments adhere to relevant regulations, standards, and internal controls.
• Communicate requirements clearly and manage stakeholder expectations to achieve cybersecurity outcomes.
• Contribute to team efforts to meet monthly service management targets, including SLAs.
• Collaborate with team members to develop optimal solutions that meet technical and security requirements.

Only candidates with an existing legal right to work in the European Union will be considered for this role.