Senior Security Officer

Mobile Vikings is one of the largest independent mobile network operators in Poland, serving over 200,000 users since 2013 and focusing on user freedom and innovation in telecommunications.

• Several years of operational/technical cybersecurity experience including security monitoring, log analysis, and incident handling.
• Experience in conducting security audits and coordinating penetration tests.
• Practical experience in creating and maintaining security policies and procedures.
• Knowledge of KSC/NIS2 requirements.
• Familiarity with cybersecurity tools and willingness to help develop the technology stack.
• Understanding of software security best practices and ability to collaborate with development teams.
• Ability to communicate technical topics clearly and conduct internal training.
• Communicative level of English language (B1).
• High degree of independence, good work organization, and ability to set priorities.

Nice to have:

• Cybersecurity certifications.
• Experience in the telecommunications industry.
• Knowledge of GDPR relevant for collaboration with the Data Protection Officer.
• Experience working in a key or important entity.

• Verify and analyze organization compliance with cybersecurity regulations such as KSC/NIS2 and key entity obligations.
• Build cybersecurity awareness by conducting training and educational activities.
• Supervise existing security systems and implement new solutions.
• Analyze logs, alerts, and security reports; handle and document security incidents.
• Develop, maintain, and test business continuity and Disaster Recovery plans, including participation in recovery tests and post-incident reviews.
• Participate in development and deployment teams to implement security best practices throughout the software lifecycle.
• Plan, organize, and coordinate security audits and penetration tests; document findings and oversee recommendation implementation.
• Create and update security policies and procedures in cooperation with Data Protection Officer (IOD) and legal team.
• Support the IOD in analyzing personal data breaches and risk assessment.

Candidates must provide consent for personal data processing for recruitment purposes. The data controller is VikingCo Poland sp. z o.o. with a designated Data Protection Officer available for contact. Personal data will be processed according to GDPR regulations and Polish labor law. Providing data is mandatory to participate in recruitment, with a retention period of up to 6 months from application date. Candidates have rights including access, rectification, deletion, and objection to data processing.