CyberSecurity Risk Manager

Location: Warsaw, Poland

Company

hirify.global, part of Accenture, manages complex public sector IT projects involving systems integration, informatics, analytics, solution implementation, and program management.

What you will do

• Develop and maintain the cybersecurity risk management strategy, frameworks, methodologies, standards, and best practices.
• Conduct cybersecurity risk assessments, threat and vulnerability analyses, Business Impact Assessments, and risk treatment planning.
• Design, implement, monitor, and evaluate security controls and maintain risk registers, reports, metrics, and documentation.
• Support governance, risk, compliance, personal data protection, and regulatory initiatives, including ServiceNow GRC processes.
• Support threat modelling for systems, applications, and DevOps environments, and contribute to Zero Trust Architecture and Directory Services security controls.
• Communicate findings and recommendations to technical and non-technical stakeholders, asset owners, executives, and senior management.

Requirements

• At least 9 years of relevant IT experience, including 6 years in cybersecurity risk management, information security governance, cybersecurity architecture, or a similar role.
• Level 7 education, such as a master’s degree or equivalent, in an ICT-related field.
• At least four internationally recognised certifications from the listed cybersecurity, risk, governance, audit, cloud, or ISO 27000 qualifications, or equivalent certifications.
• Excellent written and verbal English communication is required.
• Advanced knowledge of cybersecurity risk frameworks, regulatory requirements, cyber threats, vulnerabilities, risk assessment methods, risk treatment strategies, and security controls.
• Experience with enterprise cybersecurity assessments, governance and compliance processes, security architecture, Zero Trust, Secure SDLC, threat modelling, and stakeholder management.

Culture & Benefits

• Work on complex public sector IT and information systems projects.
• Collaborate across software development, data science, security management, machine learning, cloud, and mobile development domains.
• Provide independent expert guidance and support risk-aware decision-making across the organisation.