Cybersecurity Expert [Ekspert/Ekspertka ds. Bezpieczeństwa Informacji]

Ayvens • Warsaw, IN

8d • Hybrid

About The Position

At Ayvens, progress starts with you. Our ambitions to shape the future of sustainable mobility are powered by our talent. Join us, and get better with every move. We are looking for an Information Cybersecurity Expert to join newly created Information Risk Management hub in Warsaw and strengthen 2nd line of defense in Ayvens. We expect you to become the 2nd line point of contact for all matters related to IT, information security and cyber risks. Your responsibilities You will take charge in: analyzing control testing outcomes and impact on security posture of companies in scope; challenging control testing framework accuracy and alignment with requirements; reporting key issues and overall security stance of companies in scope; executing 2nd line controls and giving opinion on the overall effectiveness of 1st line of defense. You will contribute to: pursuing enhancement of sound risk management practices in 1st line of defense; improving cyber related processes, like risk identification, assessment and analysis; incident management processes; addressing cyber security in project and vendor management initiatives; analyzing dependencies of IT systems and extent to which controls applied correspond with security needs; delivering information security awareness sessions; ensuring that the content of information risk management policies reflects corporate security goals.

Requirements

• strong communication and presentation skills that will speed up your way to success
• curiosity!
• courage to voice your concerns, expertise to justify them and open-mindedness to accept other points of view
• very good command of English (in speaking and writing), as it will be your main business language
• experience in cyber / information risk management and / or GRC
• Master’s or Bachelor’s degree
• CISM and / or CISSP certification OR strong commitment to obtain those in 2 year perspective

Nice To Haves

• Experience in IT administration is a plus

Responsibilities

• analyzing control testing outcomes and impact on security posture of companies in scope
• challenging control testing framework accuracy and alignment with requirements
• reporting key issues and overall security stance of companies in scope
• executing 2nd line controls and giving opinion on the overall effectiveness of 1st line of defense
• pursuing enhancement of sound risk management practices in 1st line of defense
• improving cyber related processes, like risk identification, assessment and analysis
• incident management processes
• addressing cyber security in project and vendor management initiatives
• analyzing dependencies of IT systems and extent to which controls applied correspond with security needs
• delivering information security awareness sessions
• ensuring that the content of information risk management policies reflects corporate security goals

Benefits

• stable employment based on an employment contract
• competitive salary and benefits
• hybrid working model from our Warsaw office
• an international community offering challenging and rewarding opportunities
• strong package of development programs, including opportunities within the Société Générale group
• a vibrant, diverse, and collaborative culture, high value and challenging work
• a competitive reward and benefits package (medical care, lunch card, cafeteria, city card, Multisport, insurance, charity days, fresh fruits and vegetables, sports initiatives and find out what else is waiting for you!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees