Mid-Level Information Security Incident Manager – Data Breach Response

Hook –
Empower cybersecurity resilience — lead critical data breach responses and safeguard global information assets.

Location & Work Model
Krakow-based opportunity with hybrid work model (up to 4 remote days per week).

As a Senior-Level Information Security Incident Manager, you will be working for our client, a leading financial institution, to enhance their data protection protocols and manage high-severity cyber incidents. You will play a vital role in defending critical assets and ensuring swift, efficient response to security threats, supporting the organization’s digital trust and integrity.

Your main responsibilities:

• Lead the response to data breach events globally, ensuring timely mitigation of risks and threats.
• Coordinate multi-team actions during incident handling, maintaining clear communication with stakeholders.
• Provide accurate, up-to-date incident reports and decision-support information to senior management.
• Build strong partnerships with Data Protection Officers, Cybersecurity Leads, Business Risk Managers, and other internal teams to facilitate incident remediation.
• Follow detailed processes and procedures to analyze, escalate, and respond to data security breaches effectively.
• Drive lessons learned sessions and implement improvements to cyber resilience and detection capabilities.
• Develop and refine playbooks and use cases to enhance incident detection and response processes.
• Collaborate with cybersecurity and IT teams to improve overall security posture and incident handling procedures.

You’re ideal for this role if you have:

• At least 3 years of experience in cybersecurity incident management or analyst roles.
• Strong problem-solving, investigative, and troubleshooting skills.
• Fluent in English and Polish, with excellent communication skills to convey complex topics clearly.
• Experience working in enterprise environments within regulated industries, especially banking or finance.
• In-depth understanding of GDPR regulations and data privacy tools.
• Knowledge of common OS platforms, log management, SIEM tools, and cloud/Big Data analysis solutions.
• Ability to make critical decisions swiftly, balancing risks and organizational priorities.

It is a strong plus if you have: (optional)

• Experience with incident management in cloud environments or with advanced threat detection tools.
• Knowledge of security frameworks such as ISO 27001, NIST, or similar.

Language Required for the role:
Fluent Polish and English (spoken and written).

Eligibility for the role:
Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER
Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.