Cyber Security Consultant (obszar GRC i Audyt)

ITLT helps partnered companies transform ambitious ideas into digital reality by providing expert IT personnel and co-creating unique IT solutions. The role is within a dedicated team at an international industrial giant, focusing on controlling and advising, where the consultant audits and reviews work done by a large global IT service provider.

• Solid practical experience in controlling network, infrastructure, or endpoint security.
• Proficiency in GRC processes, especially in vulnerability management, risk calculation, and auditing control mechanisms.
• Deep understanding of Enterprise-class protection platforms like MS Defender and Zscaler enabling critical configuration evaluation.
• Good knowledge of network segmentation, secure remote connectivity architecture, and IT/OT environments.
• Strong interpersonal skills for assertive, fact-based collaboration with external managed service integrators.
• Familiarity with system ticketing tools and comfortable navigating corporate work environments.
• Very good command of English enabling effective communication and documentation creation.

• Audit changes related to network firewalls, segmentation, and access management, promoting secure architecture principles like least privilege and jump hosts.
• Oversee the vulnerability management lifecycle, including categorization, remediation tracking, and collaboration with business owners and subcontractors.
• Analyze security exception requests and rigorously define compensatory controls and acceptance conditions.
• Technically evaluate EDR/XDR environments and security gateways, including tools from the Microsoft ecosystem and Zscaler, to identify gaps and recommend optimizations.
• Validate evidence confirming remediation of security incidents through log inspection, screenshots, and deployment notes for internal audits.
• Provide advisory support on cybersecurity matters to internal stakeholders and assess technical documentation from external entities.

The data administrator is IT Leasing Team based in Warsaw. Applicants have rights regarding their personal data according to applicable laws. Processing includes recruitment purposes with mandatory data specified by the Labor Code. Consent can be withdrawn anytime. Data recipients include Just Join IT and processing entities related to recruitment.