Business Information Security Officer

We are seeking a highly skilled and motivated Business Information Security Officer (BISO) to ensure the confidentiality, integrity, and availability of information assets for the Flight Planning product line.

This role is responsible for establishing and maintaining information security strategy, policies, and controls, helping protect sensitive information and strengthen the organization’s security posture.

Responsibilities

• Implement and operationalize information security policies and standards within the product line, ensuring alignment with the overall security strategy.
• Serve as the primary contact between the product line and the central information security organization.
• Manage and maintain the Information Security Management System (ISMS) within an ISO 27001-certified environment, ensuring product-specific compliance.
• Conduct and oversee information security risk assessments and ensure effective risk mitigation and treatment.
• Identify, assess, and coordinate remediation of technical vulnerabilities, evaluating both technical and business impact.
• Monitor and enforce technical and organizational security controls to safeguard systems and data.
• Investigate and manage security incidents, supporting incident response, mitigation, and reporting.
• Coordinate and support internal and external security audits, ensuring timely closure of findings and compliance with standards.
• Prepare and deliver regular security reports to management, highlighting risks, incidents, and mitigation actions.
• Contribute to projects and product changes from a security governance perspective, ensuring compliance and risk awareness.
• Promote security awareness and coordinate training activities for employees within the product area.

Profile

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Professional certifications such as CISSP, CISM, CISA, or CRISC are an advantage.
• Several years of experience in information security management, preferably in a GRC-focused role.
• Strong knowledge of information security frameworks and standards, such as ISO 27001 and NIST CSF.
• Experience in risk management, vulnerability management, and incident handling.
• Solid understanding of security technologies and best practices.
• Strong project management and organizational skills.
• Excellent communication and stakeholder management abilities.
• Analytical mindset and strong problem-solving skills.
• Fluent English, written and spoken.
• Readiness to work from the office in Gdańsk at least 2 days per week.

Benefits

• International working environment and development-oriented atmosphere.
• Individual career path.
• Employment contract with a gross salary range of 10,000–21,000 PLN for senior level.
• Lufthansa Group membership benefits.
• Flexible working time and place adjusted to employee needs, with workday start possible between 07:00 and 11:00.
• Support for sports activities and co-financing of Multisport cards.
• Private medical care for employees and family members.
• Life insurance.
• Training opportunities and growth paths.
• Modern office in Oliwa with a convenient location and comfortable workspace.