Senior Analyst - Cybersecurity (Risk Management & Compliance)

Your new company

An international, well-known company is expanding its IT and Cybersecurity structures in Cracow. We are looking for a Senior Analyst - Cybersecurity (Risk Management & Compliance) to join the Cyber Governance, Compliance & Risk Management team.

Your new role

This role is responsible for supporting and managing Cyber Risk Management and Compliance activities across the organisation. You will work closely with Cybersecurity, Technology and Business teams to ensure security risks are identified and monitored, controls are effectively implemented, and processes comply with relevant policies and regulatory requirements.

Duties and Responsibilities

• Lead day-to-day cyber compliance, data governance and cyber risk management activities.
• Execute cybersecurity risk assessments and control attestation processes within the GRC environment.
• Participate in the development and implementation of the organisation-wide cybersecurity risk management and compliance programmes.
• Define, create and manage cybersecurity policies and standards supporting regulatory and organisational requirements, including PCI and NACHA.
• Review control effectiveness evidence and assess the quality and effectiveness of implemented security controls.
• Document residual risks and provide guidance regarding cybersecurity risks, regulations and best practices.
• Monitor, track and manage cybersecurity findings, exceptions and issues, including reporting to relevant teams.
• Participate in process improvements within the RSA Archer platform.
• Collaborate with stakeholders, Business Analysts, process leaders and architects to interpret requirements and translate them into GRC platform solutions.
• Identify, analyse and support the mitigation of GRC-related risks within existing processes, policies and procedures.
• Prepare operational metrics and trend analysis for the Cybersecurity Leadership Team.

What you'll need to succeed

• Bachelor’s/Master’s Degree plus relevant experience within GRC domain
• Experience in GRC, cybersecurity risk management and/or policy management.
• Experience in risk assessments, IT policies and compliance requirements.
• Knowledge of RSA Archer or other GRC tools/platforms.
• Strong understanding of cybersecurity frameworks, regulatory compliance standards and enterprise risk management practices.
• Ability to interpret cybersecurity risks, regulations and controls and provide practical GRC guidance to stakeholders.
• Strong analytical, problem-solving and communication skills.
• Ability to collaborate effectively with Technology and Business stakeholders across functions and geographies.
• Excellent English communication skills

What you'll get in return

• Private medical care
• Work in a hybrid model
• Cafeteria platform
• MultiSport card
• Life insurance
• Integration events
• Complimentary coffee and tea available in the office
• Convenient on-site parking for employees
• Modern and well-equipped office with dedicated relaxation and leisure areas, including Xbox and foosball

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

Hays Poland sp. z o.o. is an employment agency registered in a registry kept by Marshal of the Mazowieckie Voivodeship under the number 361.

#li-dni

#1202314 - Karol Kopycinski