Company Description

Inetum Polska is part of the global Inetum Group and plays a key role in driving the digital transformation of businesses and public institutions. Operating in cities such as Warsaw, Poznan, Katowice, Lublin, Rzeszow the company offers a wide range of IT services. Inetum Polska actively supports employee development by fully funding training, certifications, and participation in technology conferences. Additionally, the company is involved in local social initiatives, such as charitable projects and promoting an active lifestyle. It prides itself on fostering a diverse and inclusive work environment, ensuring equal opportunities for all.

Globally, Inetum operates in 19 countries and employs over 28,000 professionals. The company focuses on four key areas:

• Consulting (Inetum Consulting): Strategic advisory services that help organizations define and implement innovative solutions.
• Infrastructure and Application Management (Inetum Technologies): Designing and managing IT systems tailored to clients’ individual needs.
• Software Implementation (Inetum Solutions): Deploying partner solutions from industry leaders like Microsoft, SAP, Salesforce, and ServiceNow.

With strategic partnerships with major technology giants, including Microsoft, SAP, Salesforce, and ServiceNow, Inetum delivers advanced technological solutions tailored to customer requirements. In 2023, Inetum reported revenues of €2.5 billion, underscoring its strong position in the digital services market.

Inetum distinguishes itself by offering a comprehensive range of benefits that meet the diverse needs of employees, providing flexibility, support and commitment. Here's what makes working at Inetum unique:

• Flexible and hybrid work:
  • Flexible working hours.
  • Hybrid work model, allowing employees to divide their time between home and modern offices in key Polish cities.
• Attractive financial benefits:
  • A cafeteria system that allows employees to personalize benefits by choosing from a variety of options.
• Community and Well-Being:
  • Dedicated team-building budget for online and on-site team events.
  • Opportunities to participate in charitable initiatives and local sports programs.
  • A supportive and inclusive work culture with an emphasis on diversity and mutual respect.

Job Description

We are looking for someone to join our Product Security project and be responsible for developing and maintaining a central catalog of security controls. The project focuses on analyzing, organizing, and harmonizing security requirements derived from various standards, frameworks, and regulations. A key aspect of the role will be mapping requirements and defining a common set of security controls that will standardize the approach to Product Security within the organization.

In this role, You will work with standards and frameworks such as NIST, IEC 62443, and AI Security, and collaborate with experts in Product Security, Architecture, and Compliance.

Your responsibilities:

• analyzing and comparing security requirements derived from various standards, frameworks, and regulations,
• creating and developing a central Security Controls Catalog,
• mapping and harmonizing security controls across different frameworks, including NIST, IEC 62443, and AI Security,
• identifying the most stringent requirements and translating them into a common set of security controls,
• ensuring full traceability between source requirements and the controls in the catalog,
• collaborating with experts and teams in Product Security, Architecture, and Compliance teams,
• developing a process for managing, maintaining, and updating the catalog,
• supporting process automation by creating a solution that facilitates mapping and reporting, e.g., using Excel VBA.

Qualifications

Must have requirements:

• Experience in analyzing and defining security controls
• Knowledge of NIST 800-53 and IEC 62443
• Security Requirements Engineering
• Security Controls Mapping / Framework Mapping
• Security Compliance / Regulatory Compliance
• Ability to analyze and harmonize security requirements from multiple sources
• Experience in creating documentation and requirement catalogs
• Very good English (C1)
• Independence and ability to work with multiple stakeholders

Nice to have requirements:

• AI Security
• NIST AI RMF
• Cyber Resilience Act (CRA)
• Experience in Medical Device Security
• Experience in Product Security Governance
• Traceability Management
• Technical Writing

Additional Information

Remote or hybrid work from one of our office in Warsaw, Poznań, Lublin, Katowice or Rzeszów. Proficiency in Polish and English at the C1 level is essential.

We hereby inform you that Inetum Polska sp. z o.o. has implemented an internal reporting (whistleblowing) procedure. The content of the procedure and the possibility to submit an internal report are available at: https://inetum.whispli.com/speakup?locale=pl