Grant Thornton Global Delivery Center Poland

Data Security Posture Management (DSPM) Lead – Manager (Poznań - hybrid)

16k - 23k PLN16 000 - 23 000 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

SeniorHybryda·PoznańFull-time·Umowa o pracę

#456900·Dodano 22 dni temu·0

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

DegreeData managementCloud securityAzure AWSSaaSIAMRBACGDPRISONISTCommunication skillsSecurityCISSPCISMAzure Security

Firma i stanowisko

Grant Thornton Global Delivery Center Poland is an international company offering data security management roles in a hybrid work setting located in Poznań. The role involves collaboration with global teams across US, EU, and APAC regions, focusing on data security posture management across cloud, hybrid, and on-premise environments.

Wymagania

Bachelor’s degree in Information Management, Library Science, Computer Science, Business Administration, or related field.
5+ years' experience in Data Management, Data/Information Governance, or Compliance within a digital environment.
Deep understanding of DSPM concepts: data discovery, classification, lineage, access governance, risk scoring, remediation workflows.
Experience with cloud security architecture across Azure, AWS, and SaaS platforms.
Strong understanding of IAM controls, RBAC, Conditional Access, and data-level access models.
Knowledge of encryption, masking, tokenization, and secure data handling practices.
Strong familiarity with GDPR, HIPAA, SOX, ISO 27001, NIST frameworks, and global data protection laws.
Ability to interpret regulatory requirements into technical and operational controls.
Ability to analyze complex data landscapes and identify risks and remediation priorities.
Strong communication skills for preparing executive-ready dashboards and reports.
Ability to collaborate with cross-functional teams globally (US, EU, APAC).

Nice to have:

5+ years in Information Security, Data Governance, or Cloud Security programs.
Experience in multinational environments with complex data architectures.
Certifications: CISSP, CISM, CCSP, Azure Security Engineer, or equivalent.
Prior experience deploying DSPM technologies or building governance frameworks.

Obowiązki

Sensitive Data Discovery & Classification:

Lead automated discovery of sensitive and regulated data across cloud platforms, SaaS, databases, and on-premise systems.
Ensure classification and tagging of PII, PHI, financial, client, and regulated data based on policy and regulatory requirements.

Risk Assessment & Exposure Analysis:

Continuously assess data exposure risks, excessive permissions, and misconfigurations across environments.
Evaluate compliance alignment with ISO 27001, NIST 800-53, GDPR, HIPAA, SOX, and internal standards.

Data Security Controls & Remediation:

Collaborate with Identity & Access Management to enforce least-privilege access and remove excessive permissions.
Recommend and implement security controls such as encryption, masking, tokenization, and DLP policies.
Work with platform and application teams to remediate identified data security gaps.

Monitoring & Reporting:

Provide continuous monitoring of data access patterns, anomalies, and compliance posture across hybrid environments.
Deliver automated reporting to Security, Compliance, IT Leadership, and audit stakeholders.
Track and report metrics related to risk reduction, compliance, and overall data security posture.

Policy Alignment & Governance Collaboration:

Ensure alignment between DSPM strategy and Data Lifecycle Management and Data Governance programs.
Support development and enforcement of data-centric security policies, standards, and procedures.
Work with Data Owners and Stewards to validate classification requirements and ensure ongoing data protection.

Tool & Technology Enablement:

Partner with GTech and Enterprise Architecture to ensure integrations align with global DSPM frameworks and strategy.
Experience with DSPM vendor solutions (e.g., Veronis, Proofpoint, Cyberhaven).

Cross-Functional Incident Response Support:

Support escalations for data-related security incidents with Legal, Compliance, GTech, and Business units.
Participate in investigations involving data leakage, unauthorized access, or policy violations.

Benefity

Hybrid working model with 2 days in the office and 3 days remote.
Stable employment contract with private medical care.
Benefits package including MultiSport and benefits platform.
Opportunity to work internationally with experienced professionals.
Teamwork-based culture promoting knowledge sharing.
Structured onboarding program.
Clear career development paths with access to learning and certification.
Access to training platforms and tools supporting professional growth.
Inclusive workplace welcoming people with disabilities.
Modern office located in Malta Office Park, Poznań.
Sport subscription.
Private healthcare.
Training budget.
Free coffee.
Bike parking.
Mobile phone.
In-house trainings.

Karta sportowa

Opieka zdrowotna

Dofinansowanie szkoleń

Napoje w biurze

Parking dla rowerów

Telefon

Szkolenia wewnętrzne

Grant Thornton Global Delivery Center Poland

14 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz