Senior Analyst - Cybersecurity (Risk Management & Compliance)

Our requirements

• Bachelor’s and Seven (7) years or more of related experience
• 5+ years of experience in GRC, risk management and/or policy management
• 5 years of experience in risk assessment, IT policy, compliance requirements
• 5 years of experience with RSA Archer or other GRC Tools/Platform.
• Strong understanding of cybersecurity frameworks, regulatory compliance standards, and enterprise risk management practices.
• Excellent communication skills in English (B2+ or higher) and ability to collaborate across functions and geographies.

Your responsibilities

• This position is an experienced level, hands-on Senior Analyst Cyber Risk Management & Compliance, performing IT security functions and maintaining systems, while providing technical guidance to the team
• The GRC analyst will be responsible for leading the day-to-day cyber compliance, data governance, and cyber risk management functions.
• The role will include responsibility for defining, creating, and managing cyber and organizational policies and standards in support of legal and regulatory compliance including PCI, NACHA as well as general cyber and organizational information security practices.
• The Senior analyst will participate in process improvements to the RSA Archer Platform
• Collaborate with stakeholders, business analysts, process leaders, and architects in interpreting requirements and configuring them into software platforms.
• Execute cybersecurity risk assessment and control attestation processes in GRC.
• Participate in the development and implementation of the system-wide risk management function of the information security program to ensure cyber security risks are identified and monitored.
• Participate in the system-wide information security compliance program, ensuring cyber activities, processes, and procedures meet defined requirements, policies and regulations.
• Monitor, track and manage Cyber Findings, Exceptions and Issue tracking along with reporting them to respective teams.
• Candidate should be able to provide GRC guidance and interpretation of rules, regulations, risks, and best practices.
• Ability to trouble shoot, identify, analyze and mitigate GRC related risks in existing processes, policies and procedures.
• Review control effectiveness evidence to assess the quality and effectiveness of the implemented controls.
• Document residual risk.
• Prepare and communicate operational metrics and trend analysis for the Cybersecurity Leadership Team

About the project

This is how we organize our work

What we offer

• Be part of a global cybersecurity team protecting a dynamic enterprise environment.
• Opportunity to work with modern security technologies and drive tool innovation.
• Collaborative culture with professional development opportunities.
• Hybrid work model with our Kraków office as the primary location.

Recruitment stages

• 1.
  Initial recruiter screening
• 2.
  Hiring Manager/Team interview
• 3.
  Technical/Behavioral interview
• 4.
  Final offer

SYSCO SERVICE CENTRE POLAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ