being responsible for translating security requirements into service portfolio that will help to establish the scope of security architecture function
contributing to development and implementation of security architecture process into process portfolio and ensuring effective and efficient collaboration as well as enforcement of security architecture principles
supporting analysis and assessments of the current technological landscapes, discovering gaps, deficiencies and recommending design or implementation improvements
translating information security policies into a technical security control framework and security architectural blueprints, communicating these to the projects and stakeholders
participating in definition, prototyping and continuous development of ERGO security reference architecture, methodology, models and security controls; aligning requirements from the architecture teams, technology teams and Global IT Security colleagues
supporting and/or consulting implementation of security architecture
managing stakeholder relationship by working closely with business stakeholders, domain leaders, process owners and third-party suppliers
ensuring that projects and solutions incorporate secure by design principal and that IT security is embedded at early stages of the development process
challenging the status-quo, service landscapes and security solutions in order to improve the adherence with security principles as well as policies and standards
reviewing existing architectures in the projects and assessing the security maturity and compliance levels, with the goal of jointly identifying potential short- and long-term improvement
requirements-expected :
fluency in English and Polish (C1)
education degree related to IT or Cybersecurity
proven knowledge of international security standards and methodologies as well as additional qualification (CISSP, CISA, CISM, SABSA, TOGAF or equivalent)
at least 5 years of experience working in enterprise environment and 2 years of experience working as a security architect or similar position
hands-on experience and superior technical knowledge in at least two of following technologies: Windows, Linux/Unix, Networking, Databases, Middleware, CI/CD, Containerization/K8S, Public cloud (AWS, Azure, GCP)
ability to translate business requirements into technical solutions
presentation skills including ability to present and explain complex cybersecurity solutions to non-technical audience (including C-level management)
good analytical and conceptual skills
excellent experience in security solution evaluation (e.g. Proof of Concept) and recommendation
ability to build authority and form strong relationships
ability to deal with ambiguity while working in a continually changing environment under indirect supervision
offered :
Lets be healthy – medical package, sports card, and numerous sports sections – these are some of the benefits that help our employees stay in good shape.
Lets be balanced – work-life balance is a key aspect of a healthy workplace. We offer our employees flexible working hours, a confidential employee assistant program, as well as the possibility of remote working. However, staying at home with our in-office gaming room and dog-friendly office in Warsaw won’t be easy.
Lets be smart – we organize numerous workshops and training courses. Thanks to hackathons and meetups, our specialists share their expertise with others. Additionally, we have a wide range of digital learning platforms and language courses.
Lets be responsible – each year, we participate in several CSR activities, during which, together with our colleagues, we do our best to create a better future.
Lets be fun – company-wide bike races and soccer matches, film marathons in our cinema room or other engaging team-building activities – we got it covered!
Lets be diverse – every team member is valued, regardless of gender, nationality, religious beliefs, disability, age, and sexual orientation or identity. Your qualifications, experience, and mindset are our greatest benefit!
benefits :
sharing the costs of sports activities
private medical care
sharing the costs of foreign language classes
sharing the costs of professional training & courses