IT Security & Risk Officer
Summary
IT Security & Risk Officer in Wrocław focused on third-party risk management: assessing vendor security, analyzing technical documentation, and translating risks into actionable decisions. Works with frameworks and regulations such as ISO 27001, NIST CSF, SOC 2, CIS Controls, NIS2, DORA, and the EU AI Act.
- TPRM & Security Expertise: 5+ years in cybersecurity/IT risk management, with 3+ years dedicated to third-party security assessments and vendor risk evaluations.
- Frameworks & Regulations: Practical knowledge of ISO 27001, NIST CSF, SOC 2, CIS Controls, NIS2, DORA, and the EU AI Act.
- Risk Analysis & Communication: Strong ability to analyze technical documentation, translate risks into actionable decisions, and communicate effectively in English.
- Certifications (Bonus): CISSP, CRISC, CISM, SSCP, or ISO 27001 Lead Auditor/Implementer.