Security Specialist

Join us and help take care of cybersecurity for one of the largest insurance companies in Europe. 

Warsaw-based opportunity with the possibility to hybrid work!

As a Security Specialist, you will be working for our client, a leading company in the financial sector, on a cutting-edge project to enhance their cybersecurity posture. You will be instrumental in designing, implementing, and maintaining robust security solutions to protect the company's sensitive data and critical infrastructure.

Your main responsibilities:

•   Conducting risk assessments, security evaluations, and formulating requirements for new and existing systems

•   Reviewing and validating the security architecture of systems for compliance with defined security requirements

•   Integrating security requirements into IT project lifecycles, following a "security by design" approach

•   Monitoring and overseeing the implementation of security requirements during project execution

•   Managing vulnerabilities at the design stage

•   Providing security training and awareness to the project team

•   Conducting and coordinating security testing of the implemented solution

•   Being responsible for the process of remediating identified vulnerabilities

You're ideal for this role if you have:

•   Minimum 5 years of experience in information security management

•   Understanding of cybersecurity domains: risk management, IT asset security, security architecture and engineering, identity management, cryptography

•   Experience with modern security architectures for both cloud and on-premise deployments

•   At least 2 years of experience in implementing security requirements in projects

•   At least 1 year of experience in coordinating and analyzing security tests

•   Ability to create coherent security documentation

•   Knowledge of secure configuration standards for IT systems (at least Linux/Windows operating systems, web servers, databases, and telecommunication networks)

•   A good understanding of current IT security frameworks and standards (CIS Frameworks, NIST)

•   Knowledge of encryption in transit and at rest

•   Practical experience with public cloud providers, preferably Microsoft Azure and Google Cloud Platform

•   Excellent communication skills (especially the ability to translate business requirements into an IT product, present ITSec solutions during IT architecture meetings, explain complex technical aspects to non-technical audiences, etc.)

•   Experience in internal cybersecurity reviews at the infrastructure, application, and process levels

•   English language proficiency at a minimum B2 level

Internal number #6061