Cyber Sec Governance Support Specialist

Antal Sp. z o.o. is a leading recruitment and HR advisory firm operating since 1996 in Poland and present in 35 countries. The company employs over 130 professional recruitment consultants specializing in various sectors and positions.

• Documented experience in cyber security compliance; experience in retail or distributed structure environments is preferred.
• Strong knowledge of compliance standards, especially ISO 27001 and PCI-DSS.
• Good understanding of IT security principles and risk and vulnerability management processes.
• Experience in developing, implementing, and maintaining security regulations, standards, and procedures.
• Excellent communication and documentation skills.
• Ability to collaborate effectively with international stakeholders and communicate fluently in English.
• Experience working in international environments and projects spanning multiple countries.
• Experience with AuditBoard (Optro) is an additional advantage.

Nice to have:

• Knowledge of vulnerability management, patch management, and security hardening processes.
• Experience preparing compliance reports and audit materials.
• Ability to translate security requirements into practical guidelines and actions for business and IT teams.

Cyber Security:

• Apply practical and thorough understanding of cyber security principles and best practices.
• Monitor and develop security standards within the organization.

Internal Security Regulations:

• Develop, implement, rollout, and continuously monitor internal security regulations for the retailer network on a pan-European scale.
• Collaborate with international stakeholders to ensure consistent application of security requirements.

Security Hardening Guidelines:

• Create and maintain baseline security configurations.
• Develop and update system hardening guidelines.
• Conduct quarterly reviews and updates of standards and guidelines.

Vulnerability Management:

• Implement and develop vulnerability scanning and system patching processes used by the retailer network.
• Organize monthly security scans.
• Monitor remediation actions and prepare status reports.

Security Awareness & Training:

• Prepare and conduct cyber security training sessions.
• Create materials to raise employee awareness regarding information security.
• Tailor training content to the needs of different employee groups.

Applications must be submitted in English. Data processing is managed by Antal Sp. z o.o. in Wrocław in accordance with applicable data protection laws. Personal data is processed for recruitment purposes only, with rights to access, rectify, delete, and control data processing granted to candidates. Providing mandatory data is required by labor law; refusal may prevent recruitment processing.