IT Specialist and Regional Information Security Manager (Poland, EURA region)

IT Specialist and Regional Information Security Manager (Poland, EURA region)Full-timeBusiness Line: Shared ServicesService Line: Shared Services ITERegion: Europe and AfricaJob Family: Assistant and AdministrationCompensation: PLN14000- PLN16000- monthlyCompany DescriptionEgis operates as a consulting, design, and engineering company specializing in transport and municipal infrastructure, environmental protection, general and industrial construction, and the energy sector. Across all these fields, we provide our clients with comprehensive consulting and engineering services at every stage of an investment project, from planning (including environmental impact assessments, feasibility studies, and financial and economic analyses), through design, to construction supervision and project implementation oversight.Job DescriptionEgis Poland is looking for an IT Specialistwho will also act as the Regional Information Security Manager for the EURA region, based in Poland. The role combines day-to-day IT support and local IT budget management for our Warsaw teams with the regional security function. It is part of the Group CIO Office and reports also functionally to the Group CISO.The RISM scope covers the EURA region, including the largest entities in the UK, Ireland, Poland, Romania, Serbia, Ukraine, Israel, Morocco, South Africa, and others.As Regional Information Security Manager, the holder represents the Group CISO across the EURA region, implements and monitors the Group information security policy locally, and reports risks and needs to the Group CISO. The role has delegated authority within the limits set by the Group CISO.Responsibilities:IT support:Handle incidents and requests in ServiceNow, with timely resolution and clear communication with usersHandle user account management and permissions in Microsoft 365Manage end-user hardware: deployment, configuration, repair, and asset recordsKeep the CMDB up to date and validated, with a regularly reconciled list of IT assets (hardware, software, and licences)Support local business applications, including Symfonia, Płatnik, Norma, and othersTake part in the migration of local infrastructure to Microsoft Azure, with security requirements built inProvide basic network support for the local LANCoordinate with the Group and external providers to resolve incidents and manage modernizationsBudget:Manage the local IT budget across both entities, including security-related spend: track spend, decide what is needed within the budget, and contribute to forecasting. All spend requires approval.Security:Implement and monitor the Group information security policy across the EURA region, and propose local adjustments to Group guidelinesAssess security risks, threats, and vulnerabilities for EURA entities and propose prevention and remediation plansAct as the local point of contact for security incidents, coordinate the response with the SOC, and escalate major or critical incidents to the Group CISOApprove or reject requests for privileged access to local systems, applying least privilegeCoordinate internal and external security audits and act as the local contact for external auditsRun the security awareness programme for the EURA region, including translations and local examplesOversee security compliance of local service providers and validate local IT projects against Group security requirementsReporting:Report regularly on regional security status, incidents, and KPIs to the Group CISODocumentation:Maintain technical documentation, procedures, and user guidesQualificationsRequirementsAt least 6 years of experience in IT, IT security, or both, ideally in an international or multi-site contextMaster's degree or 5-year higher education in computer science, engineering, or securityWorking knowledge of Microsoft 365, Windows systems, and IT architecturesKnowledge of international security standards and frameworks (ISO 27001, ISO 27005, NIST, GDPR) and of security and IT law in the countries concernedExperience in risk management (ISO 27005, EBIOS or similar)Experience with a ticketing system, ideally ServiceNowUnderstanding of incident management tools and processes (SIEM, SOC)Ability to lead local stakeholders on security issues and to manage conflicts between security requirements and business constraintsPolish: nativeEnglish: B2 minimum, highly communicative (C1 preferred)Nice to have:Security certification such as CISSP, CISM, or ISO 27001 Lead Implementer / Lead AuditorWorking knowledge of Microsoft Azure, or AZ-104 certificationExperience with business continuity planning (BCP) testingExperience with infrastructure migration, system deployments, or M&A integrationExperience with IT budget planning, cost tracking, or forecastingFamiliarity with Sekocenbud, Norma, Autodesk, Bentley, Bricscad, and other engineering softwarePowerShell scriptingAdditional InformationWhat we offerEmployment contract with transition to permanent employment after the trial periodOpen to B2B cooperationPrivate medical care and group life insuranceSports cardFlexible working hours (flexible start between 7:00 and 9:00)Free English and French classesWork in and experienced team and within the Group CIO OfficeOpportunities for professional developmentBy clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy applyI'm interestedI'm interestedPrivacy Notice