Security Risk Management Specialist

We are looking for a cybersecurity professional with strong experience in third-party risk management, security assessments and governance activities. Hybrid, 2 days a week from the office in Wroclaw.

Requirements:

•    Minimum 5 years of professional experience in cybersecurity, information security, IT risk management or related areas.
•    Minimum 3 years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities.
•    Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions.
•    Experience working in large enterprise environments with multiple stakeholders and governance processes.
•    Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities.
Knowledge & Skills
•    Strong understanding of cybersecurity principles and risk management practices.
•    Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies.
•    Experience assessing security controls against recognized frameworks and standards, including: 
o    ISO 27001
o    NIST Cybersecurity Framework
o    SOC 2
o    NIS2
o    DORA
o    CIS Controls
•    Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.