Senior Cloud Security Controls Specialist – Risk and Compliance

Unleash the Future of Cloud Security — Drive Innovation in Cybersecurity Controls!

Kraków-based opportunity with hybrid work model.

As a Senior Cloud Security Controls Specialist – Risk and Compliance, you will be working for our client, a leading organization in the cybersecurity industry committed to empowering organizations to protect their cloud environments. You will help shape the security landscape by ensuring comprehensive governance and effective controls on cloud platforms, contributing to safer digital ecosystems and enabling clients to operate with confidence.

Your main responsibilities:

• Collaborate with Control Owners, Security Architecture, 2LoD (Risk Management), and Chief Control Office to ensure alignment and facilitate projects within the Cloud Security Controls Team.
• Oversee governance of Cybersecurity controls on Cloud, ensuring their measurement aligns with HSBC’s frameworks and industry best practices.
• Coordinate multiple stakeholders to implement enhancements to how Cybersecurity risks and technical controls are designed and operated in Cloud environments.
• Facilitate and administrate meetings, forums, and operate forums effectively.
• Maintain and update the Team’s Operating Model, procedures, and Confluence documentation.
• Manage Epics, Stories, and Tasks within JIRA to support team goals.
• Define business requirements and participate in User Acceptance Tests (UAT) for future developments.

You're ideal for this role if you have:

• 5+ years of experience in IT risk, controls, or cybersecurity, with a strong focus on cloud security.
• Expertise in Risk and Control Management, with the ability to communicate complex IT concepts effectively to diverse stakeholders.
• Generalist knowledge of Cybersecurity, with understanding of metrics such as KCIs, KRIs, and KPIs.
• Proven technical background with experience in managing technology risks and controls.
• Strong technical writing skills and highly proficient in written English.
• Experience with Excel, PowerPoint, Word, Outlook, Jira, and Confluence.
• Ability to respond to ad-hoc tasks swiftly while maintaining high-quality outputs.
• Capable of managing conflicting priorities efficiently.

It is a strong plus if you have:

• Experience with automation in report creation or data processing.
• Familiarity with GRC Tools and ServiceNow.
• Background in Business/Data analysis.
• Project/Programme Management experience.

Language required for the role:

• Fluent English command, both written and spoken.

Eligibility for the role:

• Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.