Nexi

Cybersecurity Manager

Brak informacji o wynagrodzeniu

NieokreśloneHybryda·WarszawaFull-time

#459972·Dodano 19 dni temu·6

Źródło: Nexi

Aplikuj teraz

Tech Stack / Keywords

ISO 27001PCI DSSMicrosoft AzureSSDLCcybersecurity risk managementapplication securitycloud security

Podsumowanie oferty

Develop and execute the cybersecurity strategy for four companies within the Nexi Group in Poland. Lead the Cybersecurity Department and oversee security, risk management, and regulatory compliance, including ISO 27001 and PCI DSS.

Wymagania

Several years of leadership experience in cybersecurity or information security.
Proven experience managing expert teams and delivering complex security projects.
Ability to combine strategic business thinking with strong technical expertise.
Experience presenting recommendations and reporting to senior management and executive boards.
Practical knowledge of ISO 27001 and PCI DSS standards and requirements.
Hands-on experience in cybersecurity risk management.
Solid understanding of security incident management and response processes.
Knowledge of application security, IT infrastructure security, and cloud security, particularly within Microsoft Azure environments.
Excellent English communication skills (minimum C1 level).

Nice to have:

Experience working within organizations regulated by the Polish Financial Supervision Authority (KNF).
Experience in the financial services, payments, banking, or fintech sectors.
Participation in security certification programs and audits.
Knowledge of additional cybersecurity frameworks, standards, and regulatory requirements.

Obowiązki

Develop and execute the organization's cybersecurity strategy.
Foster a strong security culture and promote cybersecurity best practices across the organization.
Lead and develop the Cybersecurity Department, including team capability development and oversight of strategic security initiatives.
Define and implement information security standards, policies, and procedures.
Oversee data protection and the security of information processing and storage.
Conduct cybersecurity risk assessments, identify threats, and define mitigation plans.
Coordinate security reviews of systems, applications, and IT infrastructure.
Oversee application security and ensure the implementation of security-by-design principles.
Develop and maintain the security incident management and response process.
Coordinate activities related to compliance with regulatory and industry requirements, particularly ISO 27001 and PCI DSS.
Collaborate with internal and external auditors, regulators, and control functions.
Develop and implement Security Software Development Lifecycle (SSDLC) practices.
Partner with company boards and key business and technology stakeholders.
Monitor technology trends, regulatory developments, and emerging threats, translating them into actionable improvements for the organization.

Benefity

Tech equipment, including the latest technology to support your work.
Hands-on experience and structured training through PayTech University.

Szkolenia wewnętrzne

Nexi

3 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz