(Cybersecurity) Threat and Controls Assessment Consultant

Antal is a recruitment company operating in Poland, offering positions in banking and cybersecurity sectors.

• Several years of professional experience in cybersecurity, information security, or related technology fields.
• Hands-on experience with threat modelling and security assessments.
• Strong understanding of cybersecurity concepts, principles, and best practices.
• Good understanding of risk and control management.
• Ability to identify and assess threats, vulnerabilities, and control weaknesses.
• Experience translating technical security issues into business risks and recommendations.
• Experience with security assessment of complex enterprise technology environments.
• Good understanding of application design and architecture.
• Knowledge of application, network, and host security.
• Practical experience with at least one major cloud platform: AWS, Azure, or GCP.
• Strong understanding of Software Development Lifecycle (SDLC) focused on security.
• Understanding of Generative AI and Agentic AI systems and their security risks.
• Knowledge of emerging technologies and related cybersecurity threats.
• Experience with security processes, methodologies, and continuous improvement.
• Strong communication and stakeholder management skills for technical and non-technical audiences.
• Experience working in international and multicultural environments.
• Ability to work independently and collaboratively.
• Strong analytical, problem-solving, and decision-making skills.
• Comfortable in fast-paced environments with changing priorities.
• Industry-recognised cybersecurity certifications such as CISSP, CISM, CRISC, or Cloud Security certifications are advantageous.

• Perform threat modelling and threat & control assessments for on-premise, cloud, and external technology solutions.
• Identify potential security threats, vulnerabilities, and control gaps across applications, databases, networks, and infrastructure.
• Collaborate with developers, architects, and technical leads to understand solutions and identify security risks.
• Assess existing security controls and recommend improvements.
• Translate technical security findings into actionable business risk recommendations.
• Provide security input throughout the software development lifecycle (SDLC).
• Contribute to the design and development of technology solutions with security recommendations.
• Evaluate security implications of new technologies and provide recommendations.
• Collaborate with cybersecurity and technology stakeholders to investigate security issues.
• Contribute to continuous improvement of security assessment processes and tools.
• Stay updated on emerging technologies, cybersecurity threats, industry trends, and best practices.
• Support a collaborative, international environment and knowledge sharing across the cybersecurity community.