Cybersecurity Specialist

Quick Facts

• Role: Cybersecurity Specialist (hybrid)

• Location: Kraków

Description

You will support cybersecurity activities by performing technical security assessments across web and mobile applications, APIs, cloud services, platforms, business processes, and third-party solutions. The role focuses on risk-based evaluation of application security controls (authentication/authorization, sessions, encryption, logging, secure configuration), producing practical recommendations, and documenting findings for both technical and non-technical stakeholders.

Responsibilities

• Conduct security assessments for applications, APIs, cloud services, platform technology, business processes, and third-party-delivered solutions

• Evaluate security mechanisms (authentication, authorization, sessions), encryption and credential/key handling, logging, and secure configuration

• Identify risks, security gaps, and improvement areas; provide risk-based recommendations aligned with operational and business objectives

• Document risk-related conclusions and decisions clearly and professionally

• Review evidence that security controls are implemented and assess their effectiveness

• Prepare summaries of security assessments, threat analyses, and remediation recommendations for management

• Present assessment results to technical and non-technical audiences

• Support reporting of assessment outcomes, discovered threats, remediation activities, and security trends

• Review supplier security questionnaires, SOC reports, certificates, penetration testing reports, and related security documentation

• Assess security posture of current and potential suppliers, including SaaS, cloud service providers, and technology partners

• Collaborate with Procurement and Legal, business teams, and vendors to address security issues and define residual risk

• Support internal and external audits, respond to client security questions, and support regulatory/security controls

• Stay current with relevant standards and requirements (ISO 27001, NIST CSF, NIST 800-53, CIS Controls, PCI DSS, NIS2, OWASP, GLI)

• Contribute to continuous improvement of assessment processes, templates, standards, and reporting practices

Requirements

• Higher education in cybersecurity, information security, information systems, risk management, auditing, computer science, or related field OR equivalent experience

• Minimum 5 years’ experience in cybersecurity, IT risk management, IT auditing, compliance, supplier risk management, security assessment, or related area

• Documented experience independently performing security assessments and producing detailed risk-based findings and recommendations

• Experience assessing security of architecture and infrastructure and reviewing supplier documentation and audit/remediation evidence

• Experience collaborating with corporate technology environments, cloud platforms, and external service providers

• At least one certification: CISSP, CISA, CRISC, or GIAC (other certifications are a plus)

• Experience conducting vendor risk assessments or third-party security reviews

• Experience supporting audits, controls, or client security assurance activities

• Knowledge of cloud security, application security, identity and access management, and data protection

• Experience using GRC platforms, workflow management tools, ticketing systems, and compliance evidence/documentation management tools

Benefits

• Comprehensive compensation and benefits package

• Pay-for-performance approach rewarding individual impact and achievements

• Potential annual bonuses and motivation-related benefits, health and wellbeing benefits, paid time off, retirement programs, insurance coverage, and other local/statutory benefits (depending on position and location)

• Detailed compensation and benefits discussed during the recruitment process