Security Compliance Officer

Our requirements

• At least 3 years of commercial experience in the areas listed above or in a similar role.
• Skills in conducting internal audits, risks analysis, security reviews and other verification activities related to security frameworks and standards.
• Experience and knowledge of security frameworks, standards and regulations like ISO27001, 27018 & PCI DSS, NIST Cybersecurity Framework, SOC2, GDPR and others.
• Experience in creating and managing security documentation, security control frameworks, polices and procedures and tuning these policies to reflect business and security requirements.
• Experience in project management.
• Good spoken and written English.
• Self-motivation and attention to details.

Optional

• Technical understanding of the security solutions, endpoint protection etc.
• Understanding of the cloud environment and ability to map security requirements to the cloud solutions.

Your responsibilities

• Manages security control framework, map standards and requirements to the framework.
• Provides input to the security governance processes.
• Ensures that the processes within the company are compliant with all relevant security frameworks, standards and regulations.
• Implementing and supervising security processes including among the others incident management, business continuity management, vulnerability management, change management, physical security etc.
• Manages information security risk process, analyses risks, provides input to the process and monitors the required actions recommended by the process.
• Conducting selected security controls, access and permission reviews, compliance checks etc.
• Manages and conducts the internal audits within the company, ensuring that the audits and results improve the security posture of the company but also answer the standards requirements.
• Manages operational documentation required by all relevant standards and regulations including ISO27001, ISO27018 standards, SOC2 reporting, GDPR and other personal data protection regulations etc.
• Manages security policies and procedures, creates them, updates, reviews and ensures they are effective and properly implemented across the whole company.
• Identify, research, and evaluate new compliance requirements and present them to relevant stakeholders
• Provides advisory regarding legal requirements in case of security aspects but also related to other business areas relevant for the company.
• Works together with security team members to ensure successful security programs align with compliance requirements.
• Assist with daily activities and functions of the security team such as assessing vendors for security risk and provisioning application access.

Additional Information

Clause Regarding the Prohibition of Assistance Tools During Recruitment Interviews

What we offer

• Private medical care, including a dental package, for you and your family
• Group life insurance for you and your partner
• Multisport card as part of the Worksmile package
• 40 hours for professional development during work hours
• Free group language lessons
• Access to platforms like: OpenUp, Pluralsight and GoodHabitz
• Worksmile cafeteria with 525 points per month
• Referral bonus

Benefits

• sharing the costs of sports activities
• private medical care
• sharing the costs of foreign language classes
• sharing the costs of professional training & courses
• life insurance
• remote work opportunities
• flexible working time
• fruits
• integration events
• no dress code
• video games at work
• coffee / tea
• drinks
• leisure zone
• employee referral program
• charity initiatives

Recruitment stages

• 1.
  HR call
• 2.
  Technical interview

Shiji Poland