Senior Product Specialist / Product Security Engineer | C

Description

The team is building a central catalog of security controls for product security, and this role owns its development and upkeep.

The project analyses, organises and harmonises security requirements taken from standards, frameworks and regulations, with the aim of giving product security one common approach across the organisation.

The work centres on NIST, IEC 62443 and AI security material, alongside product security, architecture and compliance specialists.

The company is the Polish branch of a global IT services group that operates in 19 countries and employs over 28,000 people. It helps businesses and public institutions with digital transformation and reported revenues of €2.5 billion in 2023.

Its three main areas are consulting, infrastructure and application management, and software implementation, which deploys partner platforms for clients.

The company describes its workplace as diverse and inclusive, with equal opportunities for everyone.

Responsibilities

• Build and maintain the central security controls catalog, and set up a process for managing and updating it.
• Analyse and compare security requirements drawn from standards, frameworks and regulations.
• Map and harmonise controls across NIST, IEC 62443 and AI security, then distil the strictest requirements into one shared control set.
• Keep full traceability from every source requirement to the control that covers it.
• Work with product security, architecture and compliance teams.
• Automate mapping and reporting, for example with Excel VBA.

Requirements

• Experience defining and analysing security controls.
• Knowledge of NIST 800-53 and IEC 62443.
• Skills in security requirements engineering, controls mapping and framework mapping.
• Experience in security and regulatory compliance.
• Ability to harmonise requirements from several sources.
• Experience producing documentation and requirement catalogs, plus technical writing.
• Traceability management experience.
• Ability to work independently with many stakeholders.
• Polish and English at C1 level, which is essential.
• Background in AI security, NIST AI RMF, the Cyber Resilience Act (CRA), medical device security and product security governance.

Conditions

Remote or hybrid work from an office in Warsaw, Poznań, Lublin, Katowice or Rzeszów.

Flexible working hours.

Hybrid model that lets you split your time between home and modern offices in these Polish cities.

The company runs an internal reporting (whistleblowing) procedure for submitting concerns.

Benefits

• Training, certifications and technology conference attendance, fully funded by the company.
• Cafeteria system for choosing benefits from a range of options.
• Team-building budget for online and on-site events.
• Opportunities to join charitable initiatives and local sports programs.