Security Expert (Data Security, Incident & Crisis Management)

Provident Polska is a company operating in Poland with over 29 years in the market, recognized as a Top Employer 13 times consecutively, providing global support through its Global Security Assurance Team.

Data Security:

• Own and drive the Data Security strategy, governance framework, and control environment aligned with regulatory requirements and risk appetite.
• Define and maintain Data Security policies, standards, and architectural principles.
• Own security requirements for data access and secure system design, including authentication and authorization technologies (LDAP, Kerberos, SAML, OAuth2, OpenID Connect), PAM, RBAC/ABAC, and Zero Trust models.
• Govern data protection capabilities, including encryption, DLP, and secure data lifecycle management.
• Identify, assess, prioritize, and remediate Data Security risks and control weaknesses.
• Act as the primary authority for Data Security, balancing business, regulatory, and security requirements.
• Drive consistent implementation of Data Security controls across business and technology teams.

Incident & Crisis Management:

• Own and govern the Incident & Crisis Management framework, ensuring organizational readiness for cyber incidents and crises.
• Define and maintain incident response, crisis management, escalation processes, standards, and playbooks.
• Lead coordination of major cyber incidents and crisis situations, ensuring effective communication, decision-making, and resolution.
• Own incident severity classification, escalation criteria, executive reporting, and post-incident reviews.
• Oversee cyber crisis exercises, simulations, lessons learned, and remediation plans.
• Establish and monitor KPIs and KRIs related to incident response, recovery, and resilience.
• Coordinate response activities across Security Operations, IT, Business, Risk, Legal, Compliance, and Communications teams.

Security Assurance, Risk & Compliance:

• Ensure security requirements across cloud, infrastructure, networks, applications, end-user devices, and IAM are embedded throughout the project lifecycle.