About This Role
This role involves playing a key part in information security and ensuring the organization complies with standards, client requirements, and legal regulations. It suits someone who can effectively combine knowledge of information security with the ability to build and improve processes, and who can collaborate freely with various departments within the organization.
Responsibilities
- Supervise the Information Security Management System in accordance with ISO 27001 for a medium-sized company
- Create and maintain internal policies and procedures, overseeing their compliance
- Supervise compliance with contractual requirements and regulations (e.g., GDPR)
- Plan and conduct internal audits, and maintain relationships with the certification body in Poland
- Be responsible for risk management in the area of information security and supervise the implementation of risk treatment plans
- Verify security clauses in contracts with clients and suppliers, ensuring consistency with GDPR regulations
- Organize tests and reviews in cooperation with local IT (e.g., security tests, business continuity tests, access reviews)
- Provide substantive support to business departments in the field of information security and compliance
- Conduct introductory and periodic training for employees and promote good practices
Requirements
- Practical knowledge of ISO 27001 and GDPR regulations
- Minimum 2 years of experience in a Compliance position
- Higher education (law, administration, management, internal security, IT, or related fields)
- Experience in conducting risk analysis in information security
- English language proficiency (minimum B2 level) in speaking and writing (cooperation with foreign clients and within Paragon Group)
- Analytical, communication, and organizational skills
Nice to have:
- Knowledge of DORA, NIS2, KSC regulations
- Knowledge of other standards, e.g., ISO 22301 and ISO 31000
Benefits
- Participation in projects of strategic importance for the company's development
- Work in an international team that values development, autonomy, and cooperation
- Opportunity for professional development and gaining experience
- Real impact on implemented projects
- Stable employment and development opportunities within the company's structures
- Co-financing for sports activities
- Private medical care
- Life insurance
- Integration meetings
- Co-financing for holidays
- Mindgram Platform
