Third-Party Cybersecurity Risk Specialist
Posted Updated 1
view
Summary
A cybersecurity professional at Link Group in Warsaw who assesses the security posture of external vendors and technology partners — conducting technical security assessments, reviewing controls, identifying vulnerabilities, and supporting risk decisions. Requires 5+ years in cybersecurity and knowledge of cloud, SaaS, IAM, and frameworks like NIST and ISO 27001.
Role Overview
We are looking for an experienced cybersecurity professional to evaluate the security posture of external service providers and technology partners. The role focuses on identifying potential vulnerabilities, reviewing security controls, assessing technical risks, and supporting informed risk management decisions in a complex business environment.
- At least 5 years of experience in cybersecurity, technology risk, security engineering, security architecture, or a related field.
- Proven experience conducting technical security assessments and evaluating the effectiveness of security controls.
- Bachelor's degree in Cybersecurity, IT, Information Systems, or a related discipline.
- Strong knowledge of cloud platforms, SaaS solutions, identity and access management, network security, vulnerability management, and data protection.
- Understanding of application security, security monitoring, logging, and incident response.
- Familiarity with security frameworks and standards such as NIST CSF, NIST SP 800-53, ISO 27001, and SOC 2.
- Ability to critically assess technical documentation, identify security gaps, and independently evaluate risk.
- Strong analytical and communication skills, including the ability to present technical findings to both technical and business audiences.
- Ability to manage multiple assessments independently and work effectively with cross-functional teams.
- High level of integrity and professional ethics.