Mid-Level Third-Party Cybersecurity Risk Assessor – Security & Compliance

About the Position

Unleash the power of cybersecurity - shape resilient digital ecosystems for tomorrow!

Krakow-based opportunity with a hybrid work model (up to 4 remote days per week).

As a Mid-Level Third-Party Cybersecurity Risk Assessor, you will be working for our client, a leading global financial institution, in their dynamic Cybersecurity team. You will play a pivotal role in safeguarding organizational assets by assessing third-party security risks, ensuring compliance, and enhancing operational resilience. Join a forward-thinking environment where innovation drives career growth and security excellence.

Responsibilities

• Complete cybersecurity control assurance, security, and risk assessments for third-party engagements.
• Deliver all aspects of Third-Party Security Assessment (TPSA) service and operations, ensuring efficiency and continuous improvement.
• Collaborate effectively with HSBC Business, third-party stakeholders, TPSA region leads, and team members to meet SLAs.
• Ensure assessments adhere to relevant regulations, standards, and internal controls.
• Communicate requirements clearly and manage stakeholder expectations to achieve cybersecurity outcomes.
• Contribute to team efforts to meet monthly service management targets, including SLAs.
• Collaborate with team members to develop optimal solutions that meet technical and security requirements.

Requirements

• At least 2 years of experience in cybersecurity or related technical roles.
• Strong knowledge of IT systems, infrastructure, and data security principles.
• Practical experience in third-party security assessment processes, control testing, or audit disciplines.
• Excellent communication skills in business English (fluent) and German (fluent), both verbal and written.
• Proven ability to deliver high-quality results under pressure and pace.
• Skilled in managing and influencing stakeholders from diverse backgrounds and cultures.

Nice to Have

• Relevant cybersecurity certifications such as CISSP, CISM, or CompTIA Security+.
• A genuine enthusiasm for cybersecurity and knowledge-sharing.

Language Required for the Role

• Fluent in English and German (verbal and written).

Eligibility for the Role

• Only candidates with an existing legal right to work in the European Union will be considered for this role.

We Offer

• Competitive salary range: 16,500 - 19,900 gross (Employment Contract)
• Hybrid work model
• Access to medical insurance
• Access to Multisport
• Access to Pluralsight
• Integrational Events
• Ambassador Program

About the Company

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.

Internal number #9538