Group Cloud Security Officer (m/f/d)

KRUK S.A. is one of Europe's leading debt collection firms. The role focuses on information security within the group, requiring independent judgement, pragmatism, and cross-border collaboration to establish new security standards and promote a strong security culture globally.

• Minimum 3 years hands-on experience in cloud security with practical knowledge of Azure, Microsoft 365, and GCP security tools, preferably in a financial institution
• Willingness to participate in IT security audits
• Strong documentation skills with attention to detail
• Fluent in Polish and English (minimum B2 level)
• Understanding of information security standards like ISO27001 and knowledge of data protection laws and basic project management
• Proactive risk management approach

Optional:

• University degree in IT, engineering, or related field
• Certifications such as CISP, CISA, CISM
• Awareness of ISO27001, DORA, PFSA (KNF) Security Guidelines, and other security standards
• Knowledge of cloud computing best practices with Microsoft Azure and Microsoft 365
• Microsoft Azure and Google Cloud certifications

• Define and monitor the cloud security management framework
• Design and monitor group information security standards for Azure and GCP to ensure consistent security levels across the group
• Support risk assessment processes and aid compliance and risk mitigation strategies
• Create and deliver straightforward security training programs to raise awareness
• Align Security Policy with guidelines from the Polish Financial Supervision Authority (KNF)
• Keep up with IT security industry best practices and implement them
• Collaborate closely with the headquarters Cybersecurity Team and international security representatives
• Review security aspects of IT tools and business partnerships
• Maintain direct communication with international security teams

The recruitment process is inclusive and promotes equal opportunity regardless of gender, age, disability, religion, sexual orientation, or other unrelated factors. The process is accessible and tailored to individual needs.