Senior Third Party Cyber and Information Security Analyst

Project overview

This contract role sits in the CISO / Third Party Cyber and Information Security Oversight Remediation Team, reviewing remediation evidence for cyber control gaps identified in third-party risk assessments. The core requirements are 5+ years in third-party risk or cybersecurity assessments and regulatory or audit issue closure, an audit mindset, and the ability to assess vendor controls and communicate practical remediation requirements.

A bachelor's degree and relevant professional certification are stated; credentials such as CTPRP, CISSP, CISA, CISM, CRISC, CEH, or ITIL and familiarity with NIST, ISO 27001, PCI DSS, COBIT, or SOC 2 are additional assets. The structured experience band is 5–7 years, and the role is based in Krakow on a contract basis with a hybrid requirement of at least three office days per week. The description does not specify the client’s industry or a detailed technology platform.

Responsibilities

• We are looking for candidates who have experience in the following areas
• business risk management, or regulatory and audit issue experience in NFRI/operational risk issues closure, in line with standard procedures.
• exposure to cyber tech risk assessments of third-party vendors to identify potential security threats and vulnerabilities outcome.
• analyze and evaluate vendor security controls, policies, and procedures to ensure compliance with regulatory requirements and industry best practices.
• develop and implement risk mitigation strategies to address identified vulnerabilities and reduce the organization's exposure to cyber threats.
• communicate assessment findings and recommendations (including control requirements) to internal stakeholders, including senior management, legal, and compliance teams.
• monitor and track vendor compliance with security policies and procedures through ongoing assessment activities.
• Bachelor's degree with professional certification in Cybersecurity or Audit, Cloud Security or a related field of study;
• 5+ years of experience in third-party risk assessment or cybersecurity assessment and regulatory and audit issue closure
• Closely monitor and suggest the remediation requirements to third parties & business stakeholders
• ability to communicate effectively with both technical and non-technical stakeholders;
• strong analytical and problem-solving skills;

Requirements

• 5+ years of experience in third-party risk assessment or cybersecurity assessment and regulatory or audit issue closure
• Cybersecurity control-gap remediation review, including assessment of evidence submitted for Risk Treatment Plan closure
• Evaluation of third-party/vendor security controls, policies, and procedures against requirements and best practices
• Business risk management or regulatory, audit, NFRI, or operational-risk issue closure in line with procedures
• Risk identification, analysis, articulation, and development of practical mitigation requirements
• Effective communication of assessment findings and control requirements to technical and non-technical stakeholders
• Ongoing monitoring and tracking of vendor compliance through assessment activities
• Bachelor's degree and professional certification in cybersecurity, audit, cloud security, or a related field, as stated in the description
• Strong analytical and problem-solving skills

Project details

• Start: flexible
• Remote: hybrid
• Location: Poland, PL