Security Expert (Data Security, Incident & Crisis Management)

Our requirements

• Experience in the field of security

Your responsibilities

• Data Security
• Own and drive the Data Security strategy, governance framework, and control environment aligned with regulatory requirements and risk appetite.
• Define and maintain Data Security policies, standards, and architectural principles.
• Own security requirements for data access and secure system design, including authentication and authorization technologies (LDAP, Kerberos, SAML, OAuth2, OpenID Connect), PAM, RBAC/ABAC, and Zero Trust models.
• Govern data protection capabilities, including encryption, DLP, and secure data lifecycle management.
• Identify, assess, prioritize, and remediate Data Security risks and control weaknesses.
• Act as the primary authority for Data Security, balancing business, regulatory, and security requirements.
• Drive consistent implementation of Data Security controls across business and technology teams.
• Incident & Crisis Management
• Own and govern the Incident & Crisis Management framework, ensuring organizational readiness for cyber incidents and crises.
• Define and maintain incident response, crisis management, escalation processes, standards, and playbooks.
• Lead coordination of major cyber incidents and crisis situations, ensuring effective communication, decision-making, and resolution.
• Own incident severity classification, escalation criteria, executive reporting, and post-incident reviews.
• Oversee cyber crisis exercises, simulations, lessons learned, and remediation plans.
• Establish and monitor KPIs and KRIs related to incident response, recovery, and resilience.
• Coordinate response activities across Security Operations, IT, Business, Risk, Legal, Compliance, and Communications teams.
• Security Assurance, Risk & Compliance
• Ensure security requirements across cloud, infrastructure, networks, applications, end-user devices, and IAM are embedded throughout the project lifecycle.

About the project

Tak pracujemy

What we offer

• Stable employment – 93% of people are employed under an employment contract for an indefinite period.
• Safety – we have been on the Polish market for 29 years.
• Friendly work environment – we have received the Top Employer award 13 times in a row.
• Hybrid work – we usually meet in the office twice a week (Dworzec Gdański metro station).
• Extra 3 days of paid leave – if you use all your leave in a given calendar year.
• Private medical care with appointment guarantee service (Medicover).
• Full implementation under the supervision of a mentor, including a package of professional implementation training.
• Access to the development platform, including e-learning training, podcasts and webinars.
• Activities supporting development in the organization, e.g. the "Effective Manager" training series for people holding managerial positions.
• Business telephone (also for private use).
• Access to the ProviBenefity cafeteria platform, which is supplied with a monthly amount to be used, or subsidies for your Multisport card - you choose from 5 types of cards.
• Life insurance (UNUM Życie TUiR S.A.) on preferential terms.
• Christmas benefits and co-financing for the "Holidays under the pear tree" holiday for you and your children.
• Psychological support for employees, including: care of a psychologist (including children's), psychotherapist, dietician, coaching.

Benefits

• private medical care
• life insurance
• flexible working time
• mobile phone available for private use
• video games at work
• coffee / tea
• parking space for employees
• extra social benefits
• holiday funds
• charity initiatives
• extra leave

PROVIDENT Polska