Tribe Security Officer / Cyber Security & IT Risk Specialist
Location: Warsaw (hybrid model – 50/50)
We are looking for an experienced Cyber Security professional to join an international IT organization and support security, risk management and governance activities across agile technology teams.
The role is responsible for ensuring that security standards, IT risk processes and continuity requirements are implemented within assigned business and technology areas. The person will act as a security partner for development teams, supporting secure application delivery and promoting security best practices across the organization.
Main responsibilities:
- Acting as a security point of contact for assigned technology teams and application portfolios
- Supporting implementation of cybersecurity policies, standards and risk management processes
- Identifying, assessing and monitoring IT security risks and defining mitigation actions
- Supporting vulnerability management and remediation activities
- Promoting DevSecOps practices and integrating security into the software development lifecycle
- Supporting security activities such as application security assessments, vulnerability scans, SAST/SCA tools and penetration testing processes
- Reviewing security aspects during project and delivery phases
- Preparing security reporting and providing visibility on risk and vulnerability status
- Supporting internal controls, audits and compliance activities
- Sharing security best practices with technology teams and security stakeholders
Requirements:
- Minimum 5 years of experience in Cyber Security, Information Security or IT Risk Management
- Strong understanding of cybersecurity principles, IT risks and security governance
- Experience working with application security, vulnerability management or secure software development practices
- Ability to work with multiple stakeholders in an international environment
- Fluent English communication skills
- Strong analytical and problem-solving skills
- Ability to work independently, prioritize tasks and manage deadlines
- Experience working in Agile / DevOps environments
Nice to have:
- Certifications related to cybersecurity or IT risk management (e.g. ISO 27005, ISO 22301, CISSP or similar)
- Experience with security frameworks, compliance processes or audit activities
What the role offers:
- Opportunity to work in an international technology environment
- Exposure to global cybersecurity initiatives
- Collaboration with experienced security professionals
- Possibility to influence security standards and processes across technology teams