Director of Cyber Security Risk Office and...

On a daily basis in our team:

• you will supervise the process of identifying, assessing, monitoring, and reporting cyber security risks and taking actions to reduce the risk level,
• you will be responsible for the independent verification of the Bank's cyber security level and assessment of the effectiveness of implemented protective mechanisms. - You will be responsible for cyber security risk management in the Bank, ensuring consistency of approaches, methods, and standards,
• you will perform a control function for the department (red/purple team, cyber security audits),
• you will manage a team of managers responsible for specialized areas of cyber security, supporting their development and effectiveness,
• you will collaborate with business and technological stakeholders.

This position could be yours if:

• you have higher education, preferably in the field of IT, cyber security, risk management, or related fields,
• you have many years of professional experience in cyber security, ICT risk management, or IT. - You have experience in managing complex organizational structures, including expert and managerial teams,
• you can effectively manage leadership staff, set priorities, and build engagement around common goals,
• you have experience in creating and developing risk management systems, internal controls, or organizational governance in the area of technology and cyber security,
• you understand modern cyber security threats and their impact on the operations of a large organization,
• you can translate complex technical issues into managerial recommendations and information to support business decision-making,
• you are comfortable navigating the regulatory environment of the financial sector,
• you can make decisions under uncertainty, based on risk assessment, available data, and business needs,
• you are distinguished by strategic thinking, responsibility, relationship-building skills, and high effectiveness,
• you communicate effectively and can present complex issues to senior management,
• at the final stage of the recruitment process, you will present a current certificate of no criminal record for offenses against information protection.

Nice to have:

• experience in the banking, financial, or other organizations subject to high regulatory requirements,
• experience in managing teams performing red/purple team tasks,
• knowledge of regulations and standards such as DORA, NIS2, ISO 27001, NIST, COBIT, or similar,
• experience in building and implementing cyber security strategies and ICT risk management models.