Cybersecurity Specialist

Quick Facts

• Role: Cybersecurity Specialist

• Work model: Hybrid

• Office location: Kraków (Unity Tower), with office days flexible based on business needs (3 days/week)

Description

The Cybersecurity Specialist supports cybersecurity activities by conducting technical security assessments across web and mobile applications, APIs, cloud services, technology platforms, business processes, and third-party solutions. The role identifies security risks and gaps in areas such as authentication/authorization, session management, encryption, credentials and keys, logging, and secure configuration, then delivers practical, risk-based recommendations. You will document and present findings, support security reporting and audits, and review vendor security materials including questionnaires, SOC reports, certifications, and penetration test documentation.

Responsibilities

• Perform technical security assessments for applications, APIs, cloud systems/services, technology platforms, business processes, and third-party solutions

• Evaluate security controls including authentication and authorization, session management, encryption, credentials and keys, logging, and secure configuration

• Produce risk-based, actionable recommendations considering security, operational needs, and business goals

• Document risk findings, conclusions, and decisions clearly

• Review evidence confirming controls are implemented and assess effectiveness

• Prepare security assessment and threat analysis summaries, including remediation actions for management

• Present results to technical and non-technical audiences

• Support reporting on assessment outcomes, identified threats, remediation actions, and security trends

• Review supplier security questionnaires, SOC reports, certificates, penetration test reports, and related documentation

• Assess the security posture of prospective/current vendors, SaaS providers, cloud service providers, and technology partners

• Collaborate with Procurement and Legal, business teams, and vendors to resolve security topics and define residual risk

• Support internal/external audits, respond to customer security inquiries, and support regulatory control checks

• Stay current with standards and regulatory requirements (ISO 27001, NIST CSF, NIST 800-53, CIS Controls, PCI DSS, NIS2, OWASP, GLI)

• Contribute to continuous improvement of assessment processes, templates, standards, and security reporting practices

Requirements

• Higher education in cybersecurity, information security, information systems, risk management, auditing, computer science, or a related field, or equivalent experience

• 5+ years of experience in cybersecurity, IT risk management, IT audit, compliance, vendor risk management, security assessments, or a related field

• Documented experience conducting security assessments independently and producing detailed, risk-based findings and recommendations

• Experience assessing architecture and infrastructure security and reviewing vendor documentation, SOC reports, audit documentation, remediation plans, and compliance evidence

• Experience collaborating in corporate technology environments with cloud platforms and external service providers

• At least one of: CISSP, CISA, CRISC, or GIAC (other certifications are an advantage)

• Experience conducting vendor risk assessments or third-party security reviews

• Experience supporting audits, controls, or customer security assurance activities

• Knowledge of cloud security, application security, identity and access management, and data protection

• Experience using GRC platforms, workflow management tools, ticketing systems, and tools for collecting and managing compliance documentation

Benefits

• Comprehensive, market-competitive compensation and benefits package supporting wellbeing and recognizing individual contribution

• Pay-for-performance approach rewarding individual impact and achievements

• Depending on position and location: annual bonuses and motivation benefits; health and wellbeing benefits; paid time off; retirement programs; insurance coverage; and other local/statutory benefits

• Specific compensation and benefits will be discussed during the recruitment process