Cybersecurity Specialist (M/F)

Our requirements

• minimum 5 years of experience in cybersecurity, information security, IT security, or a related field,
• strong understanding of cybersecurity domains, including network security, endpoint security, identity and access management, cloud security, and application security,
• experience in cybersecurity risk management and security governance,
• knowledge of security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, and NIS2,
• experience supporting audits, compliance programs, or regulatory initiatives,
• familiarity with security technologies such as SIEM, EDR/XDR, IAM, PAM, DLP, vulnerability management, or related solutions,
• ability to communicate effectively with both technical and non-technical stakeholders,
• strong analytical, organizational, and problem-solving skills,
• ability to work independently and manage multiple priorities,
• professional proficiency in Polish and English.

Optional

• industry certifications such as CISSP, CISM, CRISC, Security+, CEH, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, Microsoft Security certifications, or similar,
• experience in manufacturing, industrial, energy, utilities, logistics, or other complex enterprise environments,
• knowledge of cloud platforms such as Microsoft Azure, AWS, or Google Cloud,
• experience with NIS2 readiness programs, security governance initiatives, or cybersecurity maturity improvement projects,
• familiarity with DevSecOps practices and secure software development processes,
• experience supporting digital transformation, modernization, or enterprise security projects.

Your responsibilities

• support the development and execution of the organization's cybersecurity strategy,
• develop, implement, and maintain cybersecurity policies, standards, procedures, and guidelines,
• identify, assess, and manage cybersecurity risks across IT infrastructure, applications, cloud environments, and business processes,
• collaborate with IT teams and business stakeholders to ensure security requirements are embedded into projects and operational activities,
• monitor emerging threats, vulnerabilities, and industry trends, providing recommendations for risk mitigation and continuous improvement,
• support vulnerability management processes, security assessments, penetration testing follow-ups, and remediation activities,
• participate in cybersecurity incident response activities, investigations, root cause analysis, and corrective action planning,
• contribute to business continuity and disaster recovery planning from a cybersecurity perspective,
• support compliance initiatives related to cybersecurity regulations, industry standards, and customer requirements, including NIS2 and ISO 27001,
• coordinate with external auditors, technology vendors, and security service providers,
• deliver cybersecurity awareness activities and provide guidance to employees and management on security best practices,
• prepare reports, risk assessments, and recommendations for technical and business stakeholders.

This is how we organize our work

What we offer

• a key and strategic role within the organization, with a direct impact on its cybersecurity posture and technology landscape,
• a real opportunity to influence IT development, digital transformation initiatives, and security strategy,
• the chance to contribute to the definition and execution of cybersecurity and IT governance frameworks,
• close collaboration with senior leadership and a broad scope of responsibility across business and technology areas,
• stable employment within a growing and well-established organization,
• opportunities for professional growth, training, and industry certifications,
• exposure to complex enterprise environments and modern technologies,
• a collaborative and supportive work environment focused on continuous improvement and innovation.

Recruitment for

Arche Consulting Sp z o.o.