Cybersecurity / IT GRC Specialist

Location

Gdańśk – On-site

Country

Poland

Form of employment

Employment Contract

Experience level

Mid

Apply Responsibilities

• Security Governance & Compliance
  • Monitor compliance with cybersecurity and information security requirements, perform control reviews, identify gaps, and track remediation activities across the organization.
• ISMS & Regulatory Compliance
  • Support the development and maintenance of the Information Security Management System and ensure alignment with NIS2, ISO 27001, DORA, and other regulatory requirements.
• Security Assessments & Audits
  • Conduct compliance assessments, prepare recommendations, participate in internal and external audits, and support continuous improvement of security controls.
• IT Security Oversight
  • Assess security controls, review Microsoft 365 and Entra ID security configurations, analyze technical reports, and oversee vulnerability management activities.
• SOC/MDR Provider Management
  • Support provider selection, define security requirements, monitor service quality and SLA compliance, review reports, and evaluate detection coverage and effectiveness.
• Risk & Incident Management
  • Participate in cybersecurity risk assessments, support incident classification activities, monitor remediation actions, and contribute to root cause analysis initiatives.
• Client Security Advisory
  • Conduct security reviews, perform gap assessments against regulatory frameworks, prepare recommendations, and verify implementation of corrective actions.
• Cybersecurity Service Development
  • Collaborate in the development and enhancement of cybersecurity services, helping align offerings with client and regulatory requirements.
• Security Awareness & Training
  • Support cybersecurity awareness programs, contribute to security training initiatives, and promote security best practices across the organization. Requirements

---

• Cybersecurity & GRC Experience
  • At least 2–3 years of experience in cybersecurity, information security, IT risk management, security audits, compliance, or related governance-focused roles.
• Risk & Compliance Management
  • Experience assessing security control effectiveness, managing risks, identifying compliance gaps, and supporting remediation activities.
• IT & Service Provider Collaboration
  • Experience working with internal IT teams, technology providers, and third-party security service organizations.
• SOC, SIEM & EDR Knowledge
  • Practical experience analyzing SIEM or EDR outputs, reviewing SOC reports, supporting incident handling, or collaborating with external SOC providers.
• ISO 27001 Expertise
  • Practical knowledge of ISO 27001 requirements and information security management system principles.
• Regulatory Frameworks
  • Knowledge of NIS2 and familiarity with DORA, the Cyber Resilience Act, AI Act, and related cybersecurity compliance requirements.
• Security Standards & Frameworks
  • Understanding of security frameworks and best practices such as NIST Cybersecurity Framework and CIS Controls.
• Microsoft Security Technologies
  • Good understanding of Microsoft 365 and Entra ID security features, including identity protection, access controls, and configuration assessments.
• Cybersecurity Operations Knowledge
  • Understanding of vulnerability management, incident management, backup and recovery, network segmentation, and security monitoring practices.
• Communication & Analytical Skills
  • Strong analytical thinking, documentation skills, stakeholder communication abilities, and the capability to balance business, regulatory, and technical perspectives. What we offer

---

• International Environment
  • Daily opportunity to use foreign languages within a global team
• Modern Office
  • Office space in one of the attractive districts of Gdańsk
• Flexible Benefits
  • Individual selection of benefits through the MyBenefit platform, including the Multisport card
• Healthcare
  • Access to private medical care, including home visits
• Group Insurance
  • Preferential terms for group life and health insurance
• Language Classes
  • Free English and German classes
• Psychological Support
  • Access to professional psychological support
• Latest Technologies
  • Opportunity to work with modern technologies and contribute to AI-based solutions
• Real Impact
  • Participation in projects shaping technology and supporting different sectors
• Innovation Culture
  • Work in an organization focused on innovation and implementing new solutions Nice to have

---

• NIS2 Implementation Experience
  • Experience implementing NIS2 requirements or conducting compliance assessments against NIS2 obligations.
• ISO 27001 Projects
  • Experience supporting ISO 27001 implementation, certification, auditing, or continuous improvement initiatives.
• Security Provider Oversight
  • Experience selecting, evaluating, or overseeing SOC, MDR, MSSP, or other managed security service providers.
• MITRE ATT&CK
  • Knowledge of MITRE ATT&CK and experience assessing detection coverage and security monitoring effectiveness.
• Consulting & Client-Facing Experience
  • Experience working in IT services, outsourcing, consulting, or preparing reports for clients and executive stakeholders.
• Security Certifications
  • Relevant certifications such as ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, CISA, Microsoft SC-200, or SC-900.

Apply & join the team

Didn’t find anything for yourself? Send your CV to praca@seargin.com