Third-Party Cybersecurity Risk Specialist

26k - 32k PLN26 000 - 32 000 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

SeniorHybryda·WarszawaFull-time·Umowa o pracę

#462511·Dodano 3 dni temu·1

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

CybersecuritySecurityDegreeCloud platformSaaSNetwork SecurityNISTISOCommunication skills

Podsumowanie oferty

Evaluate the security posture of external service providers and technology partners by identifying vulnerabilities, reviewing security controls, and assessing technical risks. Support informed risk management decisions in a complex business environment.

Wymagania

At least 5 years of experience in cybersecurity, technology risk, security engineering, security architecture, or a related field.
Proven experience conducting technical security assessments and evaluating the effectiveness of security controls.
Bachelor's degree in Cybersecurity, IT, Information Systems, or a related discipline.
Strong knowledge of cloud platforms, SaaS solutions, identity and access management, network security, vulnerability management, and data protection.
Understanding of application security, security monitoring, logging, and incident response.
Familiarity with security frameworks and standards such as NIST CSF, NIST SP 800-53, ISO 27001, and SOC 2.
Ability to critically assess technical documentation, identify security gaps, and independently evaluate risk.
Strong analytical and communication skills, including the ability to present technical findings to both technical and business audiences.
Ability to manage multiple assessments independently and work effectively with cross-functional teams.
High level of integrity and professional ethics.

Obowiązki

Conduct technical security reviews of external vendors and service providers.
Evaluate security controls, technical architectures, data flows, and system integrations to identify potential risks.
Review security documentation, audit reports, certifications, penetration test results, and vulnerability assessments.
Assess security measures related to cloud environments, access management, networks, data protection, application security, and incident response.
Identify control weaknesses, validate findings with relevant stakeholders, and evaluate proposed remediation actions.
Prepare risk assessment reports outlining key findings, their business impact, and recommended improvements.
Collaborate with IT, Legal, Compliance, Procurement, and other teams to support security risk management activities.
Contribute to improving assessment procedures, reporting standards, and risk evaluation methodologies.
Monitor emerging cybersecurity threats, industry standards, and best practices.

Benefity

Sport subscription.
Private healthcare.
Free coffee, snacks, and beverages.

Karta sportowa

Opieka zdrowotna

Napoje w biurze

Darmowe przekąski

Link Group

547 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz