IT Security & Risk Officer

SNI is serving as a trusted IT Outsourcing partner for prestigious clients worldwide.

• 5+ years in cybersecurity/IT risk management, with 3+ years dedicated to third-party security assessments and vendor risk evaluations.
• Practical knowledge of ISO 27001, NIST CSF, SOC 2, CIS Controls, NIS2, DORA, and the EU AI Act.
• Strong ability to analyze technical documentation, translate risks into actionable decisions, and communicate effectively in English.
• Certifications (Bonus): CISSP, CRISC, CISM, SSCP, or ISO 27001 Lead Auditor/Implementer.

• Third-Party Risk Assessments: Conduct end-to-end security risk assessments for suppliers, SaaS, cloud services, and OT solutions by evaluating technical documentation, SOC 2/ISO 27001 reports, and security evidence.
• Risk Advisory & Governance: Advise cross-functional teams (Procurement, Legal, Compliance) on vendor risks during onboarding and lifecycle management to align with internal security policies.
• Remediation & Stakeholder Engagement: Drive direct discussions with suppliers to clarify security posture, address non-compliance, and define actionable risk-remediation plans.
• TPRM Process Optimization: Continuously improve TPRM frameworks, methodologies, and workflows in alignment with emerging cyber threats and regulatory requirements.

SNI sp. z o.o. will process personal data for the purpose of the recruitment process in accordance with Data Privacy Policy. The data may also be stored and processed for future recruitment purposes, in accordance with the given consent.