Security Risk Management Specialist

We are looking for a cybersecurity professional with strong experience in third-party risk management, security assessments and governance activities. Hybrid, 2 days a week from the office in Wroclaw.

• Minimum 5 years of professional experience in cybersecurity, information security, IT risk management or related areas. • Minimum 3 years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities. • Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions. • Experience working in large enterprise environments with multiple stakeholders and governance processes. • Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities. Knowledge & Skills • Strong understanding of cybersecurity principles and risk management practices. • Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies. • Experience assessing security controls against recognized frameworks and standards, including: o ISO 27001 o NIST Cybersecurity Framework o SOC 2 o NIS2 o DORA o CIS Controls • Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.