Business Security and Risk Principal

McCormick & Company is hiring for a senior Business Security and Risk Principal role based in Łódź, Poland, with remote work options. The role reports to the Cybersecurity Business Enablement Director and focuses on security architecture, consulting, and risk assessment across cloud, on-premise, and manufacturing environments.

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Strong and proven experience in information security, including architecture, consulting, and risk.
• Strong knowledge of security frameworks (e.g. NIST 800-53).
• Experience with cloud, hybrid, and manufacturing / OT environments.
• Strong analytical, communication, and stakeholder management skills.
• Experience working in agile environments.
• Fluent English language knowledge.

• Design and advise on security solutions aligned with business and regulatory needs.
• Assess security risks for new technologies and initiatives and recommend mitigations.
• Conduct risk assessments across systems, applications, and networks.
• Consult and help design secure AI services and security patterns for RAG and Agentic AI workflows, including threat modeling, hardening, and mitigation guardrails.
• Improve security controls, policies, and processes.
• Define and evolve security best practices for cloud and on-prem environments.
• Partner closely with business leaders and technical teams.
• Communicate security concepts clearly to technical and non-technical audiences.

McCormick & Company is an equal opportunity/affirmative action employer. As a general policy, McCormick does not offer employment visa sponsorships upon hire or in the future.