Group Cloud Security Officer (m/f/d)

Technologies we use

Your responsibilities

• Define and monitor the cloud security management framework.
• Design and monitor group information security standards for various cloud platforms in the organization (Azure, GCP) to ensure a uniform level of security across the Capital Group.
• Support the risk assessment process, helping to drive compliance and risk mitigation strategies.
• Help build a strong security awareness within the company by creating and delivering straightforward training programs.
• Align the Security Policy with guidelines published by the Polish Financial Supervision Authority (KNF) for the financial industry, ensuring regulatory compliance.
• Keep up with industry best practices in IT security and apply them within our organization.
• Work closely with our headquarters' Cybersecurity Team and Security Representatives from other countries to ensure a consistent approach to information security.
• Review and provide feedback on the security aspects of IT tools and business partnerships.
• Maintain direct communication with our international security teams, ensuring a united security effort.

Our requirements

• Minimum 3 years of hands-on experience in cloud security, with practical knowledge of Azure, Microsoft 365, and GCP security tools ideally within a financial institution.
• Willingness to engage in IT security audits.
• Strong documentation skills and attention to detail.
• Fluent in English and Polish, with proficiency at B2 level or higher.
• Understanding of information security standards, like ISO27001, and familiarity with data protection laws and project management basics.
• Active approach towards managing risks.

Optional

• A university degree in IT, engineering, or a related field
• Certifications such as CISP, CISA, CISM are a plus.
• Awareness of ISO27001, DORA, PFSA (KNF) Security Guidelines, and other security standards.
• Knowledge of cloud computing best practices, especially with Microsoft Azure and Microsoft 365.
• Microsoft Azure and Google Cloud certifications.

What we offer

• Employment based on employment contract
• Flexible starting hours
• Possibility of full remote work / hybrid model (depending on the place of residence)
• Attractive employee benefits package: private medical care (Luxmed), subsidy for Multisport card, additional benefits tailored to your needs within the cafeteria system, group insurance for employees on preferential terms
• Enjoy Mindgram – a modern platform offering professional psychological support and wellbeing tools
• Opportunity to receive an attractive bonus in the employee referral program
• Possibility to rent a company car for private use

Benefits