DS Smith
I&T GRC Information Security Specialist
Poland · Work style not stated · Full time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerDS Smith
- LocationPoland
- Work styleWork style not stated
- Employment typeFull time
- Employer posted
Location – Krakow
Why is this job for you:
The I&T GRC function supports the CISO and IT leadership across a range of information security, cybersecurity and technology risk controls, in support of IT, business, regulatory and customer requirements.
Reporting to the Head of I&T GRC or direct report thereof, the role provides internal information security control consultancy and assessment, supports business and IT stakeholder third party risk management arrangements and operates agreed I&T GRC operated processes or controls.
You will:
Support creation information and cybersecurity documentation (standards, processes, or guidance) in support of certification and compliance goals in the context of external certification and regulatory compliance requirements (e.g., ISO27001 and EU NIS2 implementation)
Own or support assigned agreed information security controls operated by I&T GRC e.g., aspects of information security management, risk process management, training and awareness in collaboration with wider team, support desktop simulations
Show full description
Respond to customer security assurance requirements, and supplier security schedule / assurance
You have:
Good working knowledge of recognised information and cybersecurity domains, and standards such as the NIST CSF, ISO27001 or similar
Experience in:
delivering and working within frameworks such as ISO27001, NIST CSF or similar
information security controls design and documentation, assessment and/or assurance
information security customer questionnaires, supplier assurance and third-party risk management
facilitating risk and control processes, or cyber scenario desktop simulations
planning and delivering information security awareness campaigns
Working knowledge / practical experience of GRC platforms and/or use of Microsoft tooling, training and awareness or simulated phishing tools
Strong analytical and problem-solving skills
Effective time management skills and ability to plan against multiple competing demands
Ability to build effective working relationships across technology and business stakeholders providing GRC advice and support
Ability to communicate IT, information security or cybersecurity concepts to non-IT stakeholders.
Professional or academic qualification in relevant subject e.g., Computer Science, Information Security and/or goals to work toward certifications such as ISO27001 lead, ISC2 certifications, CISM, CRISC would be advantageous
Fluency in English
The role may include occasional planned travel (‘on-site’ visits) to DS Smith sites (international) in support of the business engagement outlined. Ability to travel up to 20%
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull time
- Employer posted
- Added to ROLIVA
- Last checked