IT Security Risk Specialist (Third-Party)

About the Project & Role We are representing a top-tier, global financial institution that heavily invests in modern technology, cloud-native solutions, and advanced Artificial Intelligence to drive its business decisions. Currently, the company is expanding its structures in Poland and is looking for the first person in the Warsaw office to join a 9-person, global Technology Governance and Risk Management team (reporting directly to the Head of the team, rolling up to the CISO). We are looking for a highly technical Subject Matter Expert (SME) who will take the wheel in the area of third-party security risk management.

This is not a compliance role focused on clicking through Excel spreadsheets. You will be technically x-raying architectures, analyzing penetration test results, and verifying whether cloud solutions and AI tools provided by external vendors are secure enough for a multi-billion-dollar business.

(Responsibilities) Technical Assessments: Perform in-depth, hands-on security assessments of new and existing third parties, with a strong focus on Cloud and SaaS environments. Architecture & Evidence Review: Analyze data flows, system integrations, assurance reports (SOC 2, ISO 27001), penetration test results, and vulnerability scans. Security Control Evaluation: Assess a wide spectrum of domains, including IAM, Network Security, Vulnerability Management, Data Protection, and AppSec.

Challenging & Validating: Engage directly with external vendors' en