Senior Security Engineer

More about us:

Billennium is a global technology company with over 20 years of experience, committed to innovation and empowering businesses. As an employer, we offer a supportive, growth-focused environment where collaboration and creativity thrive. Join us to shape the future of technology together !

About the Role:

For our client, a global automotive company, we are currently looking for a Senior Security Engineer. We are looking for a cybersecurity professional with strong experience in third-party risk management, security assessments and governance activities. The successful candidate should be comfortable assessing a broad range of technologies and services, working with international suppliers and navigating complex enterprise environments.

What we are looking for:

• Minimum 5 years of professional experience in cybersecurity, information security, IT risk management or related areas.
• Minimum 3 years of hands-on experience performing third-party security assessments, supplier security reviews, technology risk assessments or similar activities.
• Demonstrated experience analyzing technical and security documentation and translating findings into actionable risk decisions.
• Experience working in large enterprise environments with multiple stakeholders and governance processes.
• Experience in collaborating with external suppliers and managing security-related discussions and follow-up activities.
• Strong understanding of cybersecurity principles and risk management practices.
• Practical knowledge of Third-Party Risk Management (TPRM), supply chain security and vendor risk assessment methodologies.
• Experience assessing security controls against recognized frameworks and standards, including: ISO 2700, NIST Cybersecurity Framework, SOC 2, NIS2, DORA, CIS Controls
• Understanding of AI governance, AI-related risks and regulatory requirements such as the EU AI Act.
• Experience working with internal corporate security policies, standards and compliance requirements.
• Strong analytical, problem-solving and critical-thinking skills.
• Excellent written and verbal communication skills in English.

Preferred Qualifications

• CISSP, SSCP, CISM, CRISC or equivalent cybersecurity certifications.
• ISO 27001 Lead Auditor, Lead Implementer or similar audit/compliance certifications.
• Experience contributing to the design, implementation or improvement of security governance and risk management processes.

Responsibilities:

Third-Party Security Assessments

• Perform security risk assessments of third-party suppliers, products and services, including SaaS solutions, COTS applications, cloud services, hardware and OT-related solutions.
• Review supplier responses, technical documentation, security reports and supporting evidence to assess security posture and identify potential risks.
• Analyze identified risks, address the points of non-compliance, and provide clear, risk-based recommendations.
• Engage directly with suppliers and internal stakeholders to clarify security, compliance and risk-related matters.

Stakeholder Advisory & Risk Governance

• Act as a trusted advisor on third-party cybersecurity risks throughout supplier onboarding and lifecycle management processes.
• Collaborate with procurement, legal, compliance, business and cybersecurity teams to ensure security requirements are appropriately addressed.
• Ensure assessments align with internal security standards, policies and corporate requirements.

Process Improvement & Development

• Drive continuous improvement of the Third-Party Risk Management (TPRM) process, methodologies, and assessment practices.
• Identify process gaps, inefficiencies and improvement opportunities, proposing and implementing corrective actions.
• Monitor emerging threats, regulatory requirements and industry best practices to ensure the assessment framework remains effective and up to date.

Our offer:

• Comprehensive benefits - enjoy Udemy for Business, private medical care, Multisport card, veterinary package, language lessons, and shopping vouchers .
• Flexibility
  • adaptable working hours and remote/hybrid work options to suit your lifestyle & location .
• Career growth
  • access opportunities for professional development and learning, including perks related to our official partnerships with global IT giants: Microsoft, AWS, Snowflake, Salesforce & amp; more.
• Global collaboration
  • work with a diverse, international team.
• Innovative environmentbe part of a forward-thinking and growth-oriented workplace.
• Engaging community
  • Work with passionate professionals and participate in team-building events, hackathons, and CSR initiatives to make an impact bey ond work.
• Team-building events including our company tradition (annual company event in Mazury).
• A pleasant surprise to start your journey with us in the f orm of a welcome pack.

Recruitment process:

• HR call
• Client Interview
• Decision/ Feedback

Sounds interesting? Click "Apply" and have a chance to hear more!