Lead Analyst - Cybersecurity (SITRM)
Hybrid · Kraków, Lesser Poland, Poland
Job Summary
Lead Analyst - Cybersecurity (SITRM) at Sysco Poland focused on executing and supporting the global Cybersecurity Supplier IT Risk Management program. Responsibilities include performing security risk assessments of suppliers across lifecycle stages, acting as the primary contact for international supplier assessments, educating and communicating cyber risk to global vendor management, collaborating with stakeholders to review cybersecurity terms in supplier agreements, supporting program enhancements and technical requirements, training team members on updated processes, and preparing monthly program metrics and remediation plans to reduce cyber risk. Requires 6+ years in IT audit or third-party security risk management, deep knowledge of application, network, and cloud security, proficiency with third-party risk frameworks/tools (Archer preferred), and relevant security certifications (e.g., CISSP, CISM, CISA, CTPRP/CTPRA, ISSAP/ISSEP). Hybrid work model with Kraków office as primary location.
Required Qualifications
- Bachelor’s Degree in Information Technology, Information Systems, Computer Science or related field
- 6+ years of IT audit, supplier IT risk, vendor, or third-party security risk management
- Solid experience in process improvement and re-engineering
- Experience in application, network, and cloud security domains and assessments
- Experience with third party security risk assessment methodologies and frameworks
- Experience with third party security assessment and management tools (Archer preferred)
- Knowledge of Shared Assessments Third-Party Risk Management practices and questionnaires
- Strong communication and stakeholder engagement skills
- Experience in large enterprise environments
- Relevant certifications: CISSP, CISM, CISA, CTPRP/CTPRA, ISSAP, ISSEP
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.