New

GRC Consultant

Brak informacji o wynagrodzeniu

SeniorHybrydaFull-time

#468209·Dodano 2 dni temu·0

Źródło: Webellian

Aplikuj teraz

Tech Stack / Keywords

ISO/IEC 27001:2022NIS2Polish Cybersecurity Act (uKSC)ISMSGRCBIATPRMErambaServiceNow IRMOneTrust

Podsumowanie oferty

Support the implementation of cybersecurity governance and regulatory compliance initiatives for an international client in the energy sector. Join the Cybersecurity team to help implement an Information Security Management System (ISMS) and a unified control framework aligned with ISO/IEC 27001:2022 and NIS2.

Wymagania

7+ years of experience in Governance, Risk & Compliance (GRC), Information Security, or Cybersecurity Governance.
Hands-on experience implementing or maintaining an Information Security Management System (ISMS) based on ISO/IEC 27001:2022 or a similar information security framework.
Current working knowledge of NIS2 and the Polish Cybersecurity Act (uKSC), with experience applying their requirements in cybersecurity governance, compliance, or ISMS initiatives.
Experience supporting cybersecurity compliance or regulatory governance initiatives.
Practical experience managing cybersecurity risk registers and risk treatment processes.
Experience facilitating workshops and working directly with business stakeholders and senior management.
Good understanding of cybersecurity governance, compliance frameworks, and risk management best practices.
Native or fluent Polish (required).
Professional proficiency in English.

Nice to have:

Experience working in energy, utilities, manufacturing, or other industrial environments.
Basic understanding of Operational Technology (OT) / Industrial Control Systems (ICS) environments.
Experience with GRC platforms such as Eramba, ServiceNow IRM, OneTrust, Archer, or Lansweeper.
Experience in Third-Party Risk Management (TPRM), including vendor security assessments and supplier risk management.
Professional certifications such as ISO/IEC 27001:2022 Lead Implementer, ISO/IEC 27001:2022 Lead Auditor, CISM, CRISC, or CISA.

Obowiązki

Support the implementation and continuous improvement of an ISO/IEC 27001:2022-compliant Information Security Management System (ISMS).
Develop and maintain information security policies, standards, procedures, and governance documentation.
Build and maintain cybersecurity risk registers, including risk identification, assessment, treatment plans, ownership, and follow-up.
Conduct cybersecurity risk assessments and Business Impact Analyses (BIA), and facilitate workshops with business stakeholders.
Map security controls against ISO/IEC 27001:2022, NIS2, and other applicable regulatory and organizational requirements.
Coordinate Third-Party Risk Management (TPRM) activities, including vendor security assessments and supplier risk classification.
Collaborate with internal stakeholders to define and review information security requirements in supplier contracts.
Build and maintain IT asset inventories and support documentation of business processes and data flows.
Contribute to vulnerability management planning and compliance evidence collection.
Develop and maintain incident response and business recovery documentation.
Prepare documentation and evidence for internal and external compliance audits.
Work with client stakeholders to deliver cybersecurity governance and compliance initiatives.

Benefity

Private medical care.
Group insurance.
Multisport card.
English language classes.
Opportunity to work on international projects with cybersecurity professionals.
Exposure to cybersecurity governance and compliance programmes in a regulated environment.

Opieka zdrowotna

Ubezpieczenie

Karta sportowa

Kursy językowe

Webellian

28 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz