Deloitte

Audits companies and advises on tax and technology

Junior QRM Specialist

Security Governance, Risk & ComplianceUpdated on Nov 5

Full-timePolandNo salary listed

About the Job

Requirements

A degree in computer science, business administration, or legal advisory.
At least 1 year of experience in information security, risk management, or regulatory compliance.
Hands-on experience in a compliance-focused role.
Knowledge of administrative, technical/logical, and physical information security controls, and of legal and regulatory acts including DORA, NIS2, and the EU AI Act.
Knowledge of risk management frameworks.
Proficiency in Microsoft Office.
Advanced English proficiency, both written and spoken.
Comfort with information technology, systems, and data.
Analytical skills and thoroughness.
Good communication skills and a service-quality orientation.
Sense of responsibility and willingness to learn new systems and processes.

Responsibilities

Operate the Information Security Exception Management process.
Maintain and regularly report on KRIs and KPIs.
Support information security projects and initiatives.
Support clients with information security-related questions, requirements, and questionnaires through Client Security Assistance.
Ensure KRIs remain current and relevant, and develop new KRIs as necessary.
Lead regular reviews and enhancements of KRIs with relevant stakeholders.
Oversee the Information Security policy exception process.
Review and approve exceptions from a security perspective in accordance with defined service level agreements.
Monitor approved exceptions to ensure expired exceptions are removed on time.
Assist with the prompt completion of client security questionnaires.
Assist with business tenders by providing information security expertise.
Facilitate and coordinate security project activities and initiatives.
Track and report on project status and timelines.
Assist with internal and external information security audits.
Research security improvements and present recommendations to management regarding information security enhancements.

Desired Qualifications

Knowledge of CVSS v.4.

Who we are looking for

Degree in computer science, business administration or legal advisory
At least 1 years of experience in information security area, risk management, regulatory compliance
Hands-on experience within a compliance-focused role
Knowledge of administrative, technical/logical and physical information security controls as well as knowledge of legal and regulatory acts such as DORA, NIS2, EU AI Act
Knowledge of risk management frameworks
Knowledge of CVSS v.4 is an advantage
Proficiency in Microsoft Office
English – advanced level, both written and spoken
Comfortable with information technology, systems and data
Analytical skills and thoroughness
Good communication skills and service quality oriented
Sense of responsibility and willingness to learn new systems and processes

Your future role

Operating Information Security Exception Management process
Maintaining and regularly reporting on KRIs/KPIs
Support with information security projects and initiatives
Support with clients’ information security related questions, requirements, questionnaires (Client Security Assistance)

Operating Key Risk Indicators (KRIs)

ensures KRIs remain current and relevant, develop new KRIs as necessary
leads regular reviews and enhancements of KRIs with relevant stakeholders

Operating Information Security Exceptions Management Process

oversees the management of the Information Security policy exception process
provides exception review and approval from a security perspective in accordance with defined service level agreements (SLAs)
monitors approved exceptions to ensure timely removal of expired exceptions

Client Security Assistance

assists with the prompt completion of client security questionnaires
assists in supporting business tenders by providing expertise from an information security perspective

Security Project Activities

facilitates and coordinates security project activities and initiatives
tracks and reports on project status and timelines

Assists with the Internal and External Information Security audits

Conducts research on security improvements and presents recommendations to management regarding information security enhancements

What we offer

Stable job in multinational company based on employment contract;
Working in flexible hybrid model - partially from home and the office;
Great opportunity for professional development (individual training plan, soft skills and technical trainings, access to modern training platforms e.g. Udemy for Business, LinkedIn Learning);
Structured onboarding process and Buddy program for new joiners;
Open and friendly organizational culture based on the pillars of well-being and diversity & inclusion;
Attractive benefits

Selection process

Apply and create your future with us!

If your resume is of interest to us, the recruitment will consist of several stages:

1. Short online interview / short phone interview with Recruiter.

2. Interview/s with member/s of the team.

You will receive feedback regardless of process result.

About Deloitte

Deloitte is a variety of people, experience, industries and services we deliver in 150 countries of the world. It is an intellectual challenge, a good starting point for your career, and an excellent opportunity for continuous development and gaining valuable life experiences. What you only must do is to take the first step – press the apply button and send us your CV, go through all the stages of the recruitment process and sign a contract with us. Deloitte is simply your best choice.

About the Company

Deloitte

Audits companies and advises on tax and technology

Deloitte audits companies and advises businesses and governments on tax, technology, and risk, and it is one of the Big Four, the world's four largest accounting firms. In 1849 its founder became the first independent auditor of a public company, Britain's Great Western Railway. Its auditors check companies' financial reports for errors and fraud before investors rely on them, while its consultants design strategy, install business software, and defend clients against cyberattacks. Clients pay fees for each audit or project, and each country's Deloitte firm is a separate business owned by its local partners. Deloitte was founded in London in 1845 and is based in New York.

Company size: 10,001+
Company stage: Late Stage VC
Total funding: $17.1M
Headquarters: New York, NY
Founded: 1845

Recently Posted Jobs

Explore more opportunities at Deloitte

See more jobs