The role is remote, but it requires occasional visits to the office in Gdańsk (for example, once per quarter).

• Identifying remediation gaps and driving towards their resolution
• Advising stakeholders on the available solutions and actions that must be undertaken
• Analyzing scanning results to define concrete steps directed at de-risking the bank
• Collaborating with remediation accountable and responsible stakeholders
• Ensuring security findings are understood and remediation pace is adequate
• Maintain a proactive approach to governance and demonstrate autonomy in task execution

• Strong understanding of security domains, especially security findings assessment and remediation areas, supported by at least 2 years of experience
• Governance knowledge, proven by experience in at least one of the security findings fields: Workstation vulnerabilities, Servers vulnerabilities, Baseline deviations, Containers vulnerabilities, Static Application Security Testing (SAST), External Attack Surface Management (EASM) findings, Threat Modelling findings, API-related findings
• Knowledge and experience within the fields of problem management, Secure DevOps, DORA, OWASP
• Advanced trouble-shooting and conceptual skills with the ability to come up with solutions to uncommon problems related to remediation actions
• Knowledge of tools & methodologies for security findings assessment and enrichment
• Ability to interpret results using a variety of techniques, ranging from simple exploratory data analysis to statistical modelling
• Good understanding of risk based approach and management
• Prepare and deliver presentations to stakeholders
• Fluent English

Nice to have:

• Demonstrated experience in automation, preferably using Python, Apache Airflow, and/or Power Automate
• Practical application of AI technologies in governance processes and automation workflows