Senior IT Security Consultant

Salary: 125 - 162,5 PLN/h on B2B

Work model: remote or flexible hybrid from Katowice / Gliwice 

Why choose this offer?

• The energy market is in an exciting transition, moving away from fossil fuels towards decentral solutions, renewables, and energy efficiency
• The harmonious balance of employees in terms of age, religion, gender identity & expression, sexual identity, disability, and ethnic background
• The international work environment will allow you to have daily contact with foreign languages

Project

We're looking for a Senior IT Security Consultant to join our client's team. The project focuses on providing IT security consultancy and conducting security assessments across multiple client's projects. Key activities include advising on best practices and security requirements, ensuring project compliance with security standards, and identifying potential vulnerabilities. Regular reviews and risk assessments are conducted, with actionable recommendations to strengthen data protection and regulatory compliance. The overall aim is to enhance information and IT security, reducing risks and safeguarding client’s operational integrity.

Expected competences and knowledge

• 10+ years of proven experience with information and IT security is required
• Proven experience with business projects for IT Security consultancy, support, review and risk assessments
• Proof of competence through a current certification in the area IT security (CISSP, other technical certifications)
• Proven experience in the creation of IT security concepts and performing risk analyzes according to ISO27001
• Eexperience in performing Threat Modelling Assessment e.g. MS STRIDE
• Proven experience in the contributing to IT security architecture developments
• Proven experience in Infrastructure security, such as network security, multi layered defensive security, infrastructure security by design, endpoint security and know how about tools like Firewalls, Proxies, anti-malware concepts etc.
• Experience in application security and related concepts, such as but not limited to; OWASP, web application security principles, securing REST interfaces and APIs, different authentication and authorization concepts
  
• Perform security reviews on system architecture –for technical diagrams – including infrastructure and application components
• Perform risk assessment and properly document Impact, Likelihood, Threat, Vulnerability and Recommendations per risk
• Understands well what real Threats in IT Security and could define what needs to be done to protect systems, applications and infrastructure against such cyberthreats
  
• Strong communication skills as necessary for the management of the stakeholders within the projects involved
  
• Advanced level of spoken and written English is a must
• Nice to have experience in Cloud Security, especially for Microsoft Azure

Reponsibilities you'll have

• Providing information and IT security consultancy 
• Assisting clients' project teams in identifying and mitigating information security risks
• Advising on IT security measures tailored to the specific needs of clients' projects
• Conducting comprehensive IT system reviews for compliance with security policies
• Identifying potential gaps and vulnerabilities in clients' IT security infrastructure
• Analyzing existing security measures and evaluating their effectiveness according to industry best practices
• Preparing detailed reports on assessment findings, including risk evaluations and recommendations for improvement
• Regularly assessing compliance with data protection regulations and industry standards
• Performing threat modeling on system architectures, e.g., using methodologies like MS STRIDE to identify potential risks
• Analyzing technical diagrams, including infrastructure and application components, to assess security
• Thoroughly documenting and analyzing risk factors, including impact, likelihood, threats, vulnerabilities, and providing recommendations for each risk
• Practical experience in conducting penetration tests or managing IT systems
• In-depth understanding of genuine IT security threats and defining necessary steps to protect systems, applications, and infrastructure against cyber threats

Client – why choose this particular client from the Jit portfolio?

Jit Team is cooperating with European energy company with approximately 20 000 employees. For more than 100 years, they have electrified industries, supplied energy to people’s homes and modernized way of living through innovation and cooperation. The purpose is to make fossil-free living possible within one generation. To be able to reach this ambitious goal we are looking for talented individuals who, in addition to their passion for their own role, also have strong team spirit and want to contribute to supporting a meaningful corporate mission. 

About Jit Team

The Human factor of IT - it's not just a slogan, it's a philosophy. The foundation of Jit Team is people, which is why we prioritise you. We employ over 500 experienced experts. We create highly specialised teams for clients from all over the world. We offer team members developmental projects, a wide range of benefits and a proprietary professional development programme.

Behind our maxim are also charitable and educational activities. We support pupils and students by donating learning equipment. We offer internships to help launch careers in IT. We support water rescuers and hospitals by providing the necessary equipment. We are a Polish company and we share what we have achieved over 14 years of activity. By supporting indigenous initiatives, we ensure the circulation of good energy.