IT Security & Risk Officer

IT Security & Risk Officer (ISO 27001)
Location: Hybrid work model – 2 days per week from the client’s office in Wroclaw
Availability: ASAP / within 1 month
Contract Type: B2B via Experis
About the Role
We are looking for an experienced IT Security & Risk Officer (ISO 27001) to support and strengthen our cybersecurity governance framework in a global environment. In this role, you will be responsible for driving the development, implementation, and continuous improvement of cybersecurity standards, procedures, and controls while ensuring alignment with regulatory requirements and industry best practices.
You will play a key role in Information Security Management System (ISMS) implementation and certification activities, supporting cybersecurity compliance, risk management, audit readiness, and stakeholder engagement across business and technology functions.
Responsibilities
– Drive the development, implementation, and continuous improvement of cybersecurity standards, procedures, and governance frameworks
– Support global ISMS implementation, maintenance, and certification activities
– Ensure alignment with ISO 27001, DORA, CRA, NIS2, and other relevant cybersecurity and risk management frameworks
– Translate regulatory and framework requirements into actionable standards, procedures, controls, and security requirements
– Perform requirement mapping, compliance assessments, and gap analyses
– Coordinate cybersecurity governance activities across cross-functional teams
– Advise stakeholders on cybersecurity compliance, risk management, and control effectiveness
– Support internal and external audits, certification processes, and audit readiness initiatives
– Collaborate with business and technology teams to strengthen cybersecurity posture and regulatory compliance
– Act as a trusted advisor to senior stakeholders on cybersecurity governance and risk-related matters
Requirements
– Proven experience in cybersecurity governance, risk, and compliance (GRC)
– Strong knowledge of Information Security Management Systems (ISMS)
– Hands-on experience with ISO 27001 implementation, governance, and certification activities
– ISO 27001 Lead Implementer or Lead Auditor certification
– Good understanding of DORA, CRA, NIS2, and other relevant regulatory frameworks
– Experience conducting compliance assessments, gap analyses, and control reviews
– Strong stakeholder management and communication skills
– Ability to influence and collaborate with senior business and technology leaders
– Experience working in complex, international environments
– Fluent English skills
Nice to Have
– ISO 27005 certification
– Practical experience in information security risk management
– Experience supporting cybersecurity audit and certification programs
– Knowledge of additional cybersecurity and regulatory frameworks
Our Offer
– Multisport card
– Private healthcare (Medicover)
– Access to an e learning platform
– Group life insurance