Security Expert (Data Security, Incident & Crisis Management)

We are looking for a Security Expert to join our Global Security Assurance Team, supporting Provident all over the globe. In this role, you will act as the Group technical authority for Data Security and Incident & Crisis Management, ensuring security is embedded by design across projects, IT changes, and operational environments.

Key responsibilities:

Data Security

• Own and drive the Data Security strategy, governance framework, and control environment aligned with regulatory requirements and risk appetite.
• Define and maintain Data Security policies, standards, and architectural principles.
• Own security requirements for data access and secure system design, including authentication and authorization technologies (LDAP, Kerberos, SAML, OAuth2, OpenID Connect), PAM, RBAC/ABAC, and Zero Trust models.
• Govern data protection capabilities, including encryption, DLP, and secure data lifecycle management.
• Identify, assess, prioritize, and remediate Data Security risks and control weaknesses.
• Act as the primary authority for Data Security, balancing business, regulatory, and security requirements.
• Drive consistent implementation of Data Security controls across business and technology teams.

Incident & Crisis Management

• Own and govern the Incident & Crisis Management framework, ensuring organizational readiness for cyber incidents and crises.
• Define and maintain incident response, crisis management, escalation processes, standards, and playbooks.
• Lead coordination of major cyber incidents and crisis situations, ensuring effective communication, decision-making, and resolution.
• Own incident severity classification, escalation criteria, executive reporting, and post-incident reviews.
• Oversee cyber crisis exercises, simulations, lessons learned, and remediation plans.
• Establish and monitor KPIs and KRIs related to incident response, recovery, and resilience.
• Coordinate response activities across Security Operations, IT, Business, Risk, Legal, Compliance, and Communications teams.

Security Assurance, Risk & Compliance

• Ensure security requirements across cloud, infrastructure, networks, applications, end-user devices, and IAM are embedded throughout the project lifecycle.

What we can offer:

• Stable employment – 93% of people are employed under an employment contract for an indefinite period.
• Safety – we have been on the Polish market for 29 years.
• Friendly work environment – we have received the Top Employer award 13 times in a row.
• Hybrid work – we usually meet in the office twice a week (Dworzec Gdański metro station).
• Extra 3 days of paid leave – if you use all your leave in a given calendar year.
• Private medical care with appointment guarantee service (Medicover).
• Full implementation under the supervision of a mentor, including a package of professional implementation training.
• Access to the development platform, including e-learning training, podcasts and webinars.
• Activities supporting development in the organization, e.g. the "Effective Manager" training series for people holding managerial positions.
• Business telephone (also for private use).
• Access to the ProviBenefity cafeteria platform, which is supplied with a monthly amount to be used, or subsidies for your Multisport card - you choose from 5 types of cards.
• Life insurance (UNUM Życie TUiR S.A.) on preferential terms.
• Christmas benefits and co-financing for the "Holidays under the pear tree" holiday for you and your children.
• Psychological support for employees, including: care of a psychologist (including children's), psychotherapist, dietician, coaching.