Cybersecurity Risk and Compliance Manager

Cybersecurity Risk and Compliance Manager helping EY clients strengthen cybersecurity, compliance, and resilience programs. Leading risk assessments, governance frameworks, audits, and hands-on project delivery from Poland.

Posted 8/10/2026full-timeKatowice • 🇵🇱 PolandSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity risk management, including risk assessments, compliance with ISO 27001 and NIST standards, and Third Party Risk Management. Proven ability to develop and implement risk management strategies while ensuring effective stakeholder communication and project leadership.

Highest-signal resume keywords

Cybersecurity Risk ManagementISO 27001 ComplianceThird Party Risk ManagementProject ManagementStakeholder Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentThreat ModellingStrategic Mitigation PlanningGovernance FrameworksKPI DevelopmentISMS AuditsCyber Program AssessmentsCyber TransformationEnterprise ResilienceBudgeting and Work Estimation

Soft Skills

Interpersonal SkillsAnalytical AbilitiesProblem-SolvingTeam CoordinationAttention to Detail

Certifications & Qualifications

CISSPCISMCRISCCGRCISO/IEC 27001 Lead ImplementerISO/IEC 27005 Risk Manager

Industry Keywords

DORANIS2EU Cybersecurity ActEU AI ActCybersecurity Governance

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Evaluate and assess clients' cybersecurity and risk management programs
Develop and implement risk management strategies
Conduct compliance and control evaluations against ISO 27001, NIST and other regulations and standards
Perform audits or reviews of ISMS and IT general controls
Manage Third Party Risk Management processes
Provide cybersecurity domain knowledge across governance, IT infrastructure security and risk management
Participate hands-on in project delivery and complete technical and operational tasks
Collaborate with engagement team members
Set up governance frameworks for cybersecurity services
Develop and monitor KPIs for cybersecurity services
Oversee service delivery processes and client satisfaction
Prepare offers and proposals, discuss client needs, and pursue and secure project engagements
Balance hands-on technical work with team coordination and broader project objectives

Requirements

What you’ll need

Minimum 8 years of experience in cybersecurity risk management
Expertise in complex risk assessments, threat modelling and strategic mitigation planning
Experience assuring conformity with ISO 27001, NIST and ISMS governance systems
Experience implementing risk management plans
Experience in Third Party Risk Management
Cybersecurity domain knowledge, including governance, IT infrastructure security, risk management, cyber program assessments, cyber transformation and enterprise resilience
Excellent interpersonal skills and ability to inspire teamwork and responsibility
Strong analytical and problem-solving abilities with attention to detail
Strong project management skills, including project planning and resource management
Budgeting and work estimation, including man-day estimation and resource allocation
Effective stakeholder communication
Excellent command of English; other languages are an asset
Ability to liaise with stakeholders and manage multiple priorities
Proven hands-on technical work and project leadership/coordinating experience
Knowledge of DORA, NIS2, EU Cybersecurity Act, EU AI Act and/or other relevant EU regulations
CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27005 Risk Manager or equivalent certification is an asset

Benefits

Comp & perks

Continuous learning and development opportunities
Tools and flexibility to make a meaningful impact
Leadership insights, coaching and confidence-building
Diverse and inclusive culture
Collaboration on exciting projects with well-known global brands
Access to an ecosystem of people, learning, skills and insights