At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.
Your impact Hybrid work model Candidates are required to work from our Kraków or Warsaw office at least two days per week. The remaining working days may be performed remotely from home.
We are looking for a
Cyber Security Risk Specialist
to help support our clients in assessing and maturing their global cyber security postures, whilst helping cyber teams develop their strategies and target operating models. In this role, you will bridge the gap between business, technical teams and cyber leadership (e.g., CISOs,) to build practical, scalable cyber strategies and operating models for our clients. In parallel, you will focus heavily on conducting threat and risk assessments, managing complex cyber programs, and ensuring robust security alignment across IT and OneTrust environments.
Responsibilities
Support client engagements relating to the development of cyber strategies, technical workflows, and target operating models
Conduct comprehensive threat and risk assessments across complex IT and/or OT environments, helping clients make proportionate and cost-effective security decisions.
Support the design and delivery of complex cyber security programs, ensuring alignment with client objectives, regulatory requirements, and the evolving cyber threat landscape.
Work closely with clients’ security leaders, architects, and engineering teams to embed secure-by-design principles and translate security frameworks into practical technical requirements.
Support effective program governance, risk management, and reporting to ensure security initiatives remain on track, mitigate risks, and deliver business value.
Qualifications
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Telecommunications, Engineering, or a related field.
Proven consulting experience delivering cyber security risk assessments, strategy, or assurance projects for external clients in complex or highly regulated environments.
Practical experience applying and interpreting core industry frameworks and standards, such as NIST CSF, ISO 27001, IEC 62443, NCSC CAF, or NIS/NIS2.
Strong understanding of cyber security principles, operating models, and program management methodologies (e.g., Agile, Waterfall).
Relevant cyber security qualifications (such as CISSP, CISM, CRISC, SABSA).
Strong stakeholder management skills, with the ability to communicate complex cyber risk topics to senior executives and navigate ambiguous technical challenges.
Strong foundational knowledge of enterprise Governance, Risk, and Compliance (GRC) principles.
Strong analytical, problem-solving, and communication skills.
Professional working proficiency in English.
Nice to have
Background working with critical national infrastructure, including energy, water, transport, civil nuclear, or smart infrastructure sectors.
Experience working with cloud security, OT/IoT security, or digital security architectures.
Familiarity with related cyber security disciplines such as third-party risk management, data governance & privacy, AI governance, and operational Resilience
Knowledge in designing and developing custom AI Agents in relation to cyber security
Relevant program management qualifications (such as PRINCE2, MSP, or AgilePM)
We offer
Rewarding employment - full-time employment with a salary that matches your qualifications
Hybrid work model - enjoy the flexibility of working mostly from home
Flexible hours - start your day anytime between 730 and 1000 AM
Comprehensive benefits, including Lux Med medical care, psychological support, life insurance, My Benefit cafeteria system, Multisport card co-financing, and a car/bike park sharing system
Co-financed holidays - enjoy "Wczasy pod Gruszą" for a well-deserved break
Global projects - engage in exciting international projects
Inclusive networks - join our diverse employee networks like Women's Network, OneWorld, PRISM, Careers Network, Green Team, SpeakUp, Collectively, and more
Continuous learning - participate in our Graduate Development Program, Learners’ Community, and self-learning platforms
Language courses - enhance your skills with courses in English, German, and Polish
We know that if we are inclusive, we’re more connected, and if you’re diverse, we’re more creative. We accept people for who they are, regardless of age, disabilities, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. Find out more about life at Jacobs. As a Disability Confident employer, we will interview all disabled applicants who meet the criteria for a vacancy.
#J-18808-Ljbffr
Cyber Risk & Strategy Consultant – pracodawca: Jacobs
Jacobs to dynamiczne środowisko pracy, które stawia na rozwój pracowników i innowacyjność. Pracując w Krakowie jako Salesforce Data Administrator, będziesz częścią międzynarodowego zespołu, korzystając z elastycznych opcji pracy hybrydowej oraz atrakcyjnego pakietu benefitów, w tym prywatnej opieki medycznej. Nasza kultura pracy sprzyja współpracy i ciągłemu doskonaleniu, co czyni nas doskonałym pracodawcą dla osób poszukujących satysfakcjonującej kariery.
