Praca w miastach:Praca IT Warszawa•Praca IT Kraków•Praca IT Wrocław•Praca IT Szczecin•Praca IT Poznań•Praca IT Lublin•Praca IT Katowice•Praca IT Bydgoszcz•Praca IT Łódź•Praca IT Białystok•Praca IT Toruń•Praca IT Gdańsk
Stanowiska:Grafik komputerowy praca•Tester gier praca•Programista praca•Tester oprogramowania praca•Frontend Developer praca•Data scientist praca•Tester manualny praca•Tester praca•Analytics praca•Tester aplikacji praca•Programista java praca•Web developer praca
Technologie i narzędzia:Python praca•Cyberbezpieczeństwo praca•Java praca•Bazy danych praca•Cisco praca•C++ praca•Javascript praca•SQL praca•Business Intelligence praca•Delphi praca•Wordpress praca•Testowanie aplikacji praca•C# praca•PHP praca
Specjalizacje:Backend praca•Devops praca•Frontend praca•Full-stack praca•GameDev praca•Mobile praca•Embedded praca•Architecture praca•QA/Testing praca•Security praca•AI/ML praca•Big data science praca•Helpdesk praca•IT admin praca•Agile praca•Product Management praca•Project Management praca•UX/UI praca•Business analytics praca•SAP & ERP praca•System analytics praca•PO/PM praca•Scrum master praca•Analityka praca•Data analytics & BI praca
Offer summary
(Summary generated by AI based on the full job description)
The project covers I&T GRC supporting the CISO and IT leadership on information security controls, compliance and risk management for certification and regulatory needs, including ISO27001 and NIS2. Required practical experience with frameworks such as NIST CSF, GRC platforms and Microsoft tooling, plus handling customer security questionnaires and supplier assurance. Responsibilities include producing security documentation and controls, conducting assessments and desktop simulations, supporting third‑party risk management, responding to customer assurance requests and running awareness campaigns; travel up to 20%.
I&T GRC Information Security Specialist
Company: International Paper Global Business Services Center
from: 15 October 2026
to: 14 November 2026
salary not specifiedcontract of employment (full-time)
Offer parameters
level:mid
working mode:hybrid
location:Kraków, Lesser Poland
Kraków, Lesser Poland
Requirements
Expected technologies
ISO27001
Our requirements
- Good working knowledge of recognised information and cybersecurity domains, and standards such as the NIST CSF, ISO27001 or similar
- Experience in:
- delivering and working within frameworks such as ISO27001, NIST CSF or similar
- information security controls design and documentation, assessment and/or assurance
- information security customer questionnaires, supplier assurance and third-party risk management
- facilitating risk and control processes, or cyber scenario desktop simulations
- planning and delivering information security awareness campaigns
- Working knowledge / practical experience of GRC platforms and/or use of Microsoft tooling, training and awareness or simulated phishing tools
- Strong analytical and problem-solving skills
- Effective time management skills and ability to plan against multiple competing demands
- Ability to build effective working relationships across technology and business stakeholders providing GRC advice and support
- Ability to communicate IT, information security or cybersecurity concepts to non-IT stakeholders.
- Professional or academic qualification in relevant subject e.g., Computer Science, Information Security and/or goals to work toward certifications such as ISO27001 lead, ISC2 certifications, CISM, CRISC would be advantageous
- Fluency in English
- The role may include occasional planned travel (‘on-site’ visits) to DS Smith sites (international) in support of the business engagement outlined. Ability to travel up to 20%
Your responsibilities
- Support creation information and cybersecurity documentation (standards, processes, or guidance) in support of certification and compliance goals in the context of external certification and regulatory compliance requirements (e.g., ISO27001 and EU NIS2 implementation)
- Own or support assigned agreed information security controls operated by I&T GRC e.g., aspects of information security management, risk process management, training and awareness in collaboration with wider team, support desktop simulations
- Respond to customer security assurance requirements, and supplier security schedule / assurance
About the project
The I&T GRC function supports the CISO and IT leadership across a range of information security, cybersecurity and technology risk controls, in support of IT, business, regulatory and customer requirements.
Reporting to the Head of I&T GRC or direct report thereof, the role provides internal information security control consultancy and assessment, supports business and IT stakeholder third party risk management arrangements and operates agreed I&T GRC operated processes or controls.
International Paper Global Business Services Center
We are DS Smith, together with International Paper, we are a global leader in sustainable packaging solutions and other fibre-based products. We believe a better, more sustainable tomorrow is possible with the right people, who challenge and support one another to enact positive change. We employ more than 60,000 colleagues in North America and Europe, Middle East and Africa (EMEA), who are experts in innovation, manufacturing, design, sales, sustainability, supply chain, and much more. Together with our customers, we make the world safer and more productive, one sustainable packaging solution at a time. Become part of a world-leading organisation and do your best work with us!
As the journey continues of bringing together the strengths of both organisations, during your candidate experience you may engage with our colleagues from International Paper! You could visit an International Paper or DS Smith site or office.
I&T GRC Information Security Specialist
I apply to:
International Paper Global Business Services Center
Kraków, Lesser Poland
Pracodawca zbiera zgłoszenia przez swój system.
Przejdziesz na zewnętrzny formularz.
By clicking "Aplikuj" you confirm that you've read and accepted our Terms and Conditions.
This is how the employer processes your data
The information necessary in the recruitment process is: name, surname, contact details, education, previous employment record and qualifications.
Any supplementary information you provide is processed on the basis of your consent.
For the purpose of application to the position specified in the job posting we ask you to place the following statement in your application:
“I, hereby, consent to the processing of my personal data contained in the application for the job by International Paper Polska Sp. z o.o for the purpose and to the extent necessary in the recruitment process.”
If you want to take part not only in the recruitment process for the job position you applied for but in future recruitment processes as well, we ask you to place the following statement in your application:
„I, hereby, consent to the processing of my personal data contained in the application for the job by International Paper Polska Sp. z o.o for the purpose and to the extent necessary in the current recruitment process and in the future recruitment processes as well.”
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Need more information?
- Make sure the body of the offer doesn’t already include what you’re looking for.
- Ask a question if you need more information you’re interested in.
- We’ll forward your question to the employer and aim to provide a response within 3 business days.