Mid-Level Third-Party Cybersecurity Risk Assessor – Security & Compliance

Unleash the power of cybersecurity — shape resilient digital ecosystems for tomorrow!

Krakow-based opportunity with hybrid work model (up to 4 remote days per week).

As a Mid-Level Third-Party Cybersecurity Risk Assessor, you will be working for our client, a leading global financial institution, in their dynamic Cybersecurity team. You will play a pivotal role in safeguarding organizational assets by assessing third-party security risks, ensuring compliance, and enhancing operational resilience. Join a forward-thinking environment where innovation drives career growth and security excellence.

Your main responsibilities:

• Complete cybersecurity control assurance, security, and risk assessments for third-party engagements.
• Deliver all aspects of Third-Party Security Assessment (TPSA) service and operations, ensuring efficiency and continuous improvement.
• Collaborate effectively with HSBC Business, third-party stakeholders, TPSA region leads, and team members to meet SLAs.
• Ensure assessments adhere to relevant regulations, standards, and internal controls.
• Communicate requirements clearly and manage stakeholder expectations to achieve cyber security outcomes.
• Contribute to team efforts to meet monthly service management targets, including SLAs.
• Collaborate with team members to develop optimal solutions that meet technical and security requirements.

You're ideal for this role if you have:

• At least 2 years of experience in cybersecurity or related technical roles.
• Strong knowledge of IT systems, infrastructure, and data security principles.
• Practical experience in third-party security assessment processes, control testing, or audit disciplines.
• Excellent communication skills in business English (fluent) and German (fluent), both verbal and written.
• Proven ability to deliver high-quality results under pressure and pace.
• Skilled in managing and influencing stakeholders from diverse backgrounds and cultures.

It is a strong plus if you have: (optional)

• Relevant cybersecurity certifications such as CISSP, CISM, or CompTIA Security+.
• A genuine enthusiasm for cybersecurity and knowledge-sharing.

Language Required for the role:

• Fluent in English and German (verbal and written).

Eligibility for the role:

• Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.