Senior Specialist for Security Compliance Management (m/f/d) - Security Governance Section

Job ID: 3558633

Senior Specialist for Security Compliance Management (m/f/d) - Security Governance Section

Warsaw

Professional

Application deadline: 30.12.2026

Regular (Part Time Possible)

T-Mobile Polska

Your Task

• Development and maintenance of a risk management framework and internal control system in the areas of information security, cybersecurity and business continuity.
• Conducting and coordinating risk identification, assessment and monitoring processes for business processes, IT systems and transformation initiatives.
• Design, evaluate effectiveness and improve control mechanisms to support compliance with regulatory requirements, industry standards and ISO standards.
• Monitor regulatory changes and assess their impact on the organization, including participation in the implementation of requirements resulting from NIS2, DORA, UKSC and other sectoral regulations.
• Collaborate with process and risk owners in defining risk management plans and monitoring mitigation activities.
• Maintenance and development of documentation related to risk management, internal controls and information security management system.
• Planning and implementation of internal audits and assessments of compliance with ISO 27001, ISO 22301 and regulatory requirements, as well as monitoring the implementation of corrective actions.
• Preparation of management reports, analyses and materials to support risk and safety decision-making.
• Supporting business and technology projects by assessing risks, regulatory requirements and security adequacy, including for cloud and AI solutions.
• Representing organizations during audits, regulatory audits, and working with business partners, external auditors and international working groups.

Your Profile

• Higher education (computer science, cybersecurity, risk management, finance, auditing, information security or related fields).
• Minimum of 5 years of experience in risk management, internal control, compliance, information security or cybersecurity.
• Practical knowledge of risk management standards and internal control systems, in particular ISO 27001, ISO 31000, COSO or equivalent.
• Experience in a regulated environment and working with audit and control requirements (e.g. SOX, NIS2, DORA, telecommunications or financial sector regulations).
• Experience in conducting risk analyses, evaluating the effectiveness of controls and preparing recommendations for business and management.
• Practical knowledge of audit processes and cooperation with internal and external audit.
• Ability to interpret regulatory requirements and translate them into processes and control mechanisms.
• Experience in stakeholder management and working in a project environment.
• Very good analytical, communication skills and the ability to present risk and control issues at managerial level.
• Knowledge of English at a minimum level of B2.
• Certificates related to audit, risk and security are welcome, e.g. ISO 27001 Lead Auditor, CRISC, CISA, CIA, CGEIT, ISO 31000 Risk Manager.

About Us

The Security Governance team is responsible for ensuring that the organization operates in accordance with security requirements — both regulatory (law, ISO standards) and internal standards. As part of the team, you will support the development and maintenance of security frameworks, collaborate with IT and business teams, and ensure compliance of systems and processes with applicable regulations. Your role will also include participating in audits, identifying vulnerabilities and recommending actions to improve security in the organization.