Senior Threat and Controls Assessment Analyst – Cybersecurity

Unleash the Power of Cybersecurity — Shape the Future of Threat Management!

Krakow-based opportunity with hybrid work model (up to 4 remote days per week).

As a Senior Threat and Controls Assessment Analyst within our client’s global Cybersecurity team, you will be instrumental in safeguarding critical services by performing comprehensive threat modeling and vulnerability assessments. You will collaborate with international teams to enhance security controls, influence strategic decisions, and drive innovation in a fast-paced environment.

Your main responsibilities:

• Conduct thorough threat and control assessments of services across internal, external, and cloud environments.
• Liaise with Developers, Architects, and Technical Leads to understand services and identify control gaps.
• Evaluate business requirements, analyze potential solutions, and deliver actionable security recommendations.
• Contribute hands-on to the design, development, and support of security projects.
• Identify threats across applications, databases, networks, and infrastructure components.
• Collaborate with Cybersecurity teams, management, and business units to resolve security issues.
• Assist in developing and refining security processes, procedures, and tools.
• Stay informed about industry trends and emerging threats to continuously improve security posture.

You're ideal for this role if you have:

• Over 5 years of experience in cybersecurity, risk management, or related fields.
• Strong knowledge of threat modeling, vulnerability assessment, and security controls.
• Hands-on experience with diverse enterprise IT assets, including applications, networks, and cloud environments.
• Deep understanding of application architecture, design, and secure SDLC practices.
• Familiarity with Cloud Service Providers such as AWS, GCP, or Azure.
• Knowledge of Generative and Agentic Artificial Intelligence systems and their security implications.
• Excellent communication skills in English (fluent level).
• Ability to articulate technical risks effectively to both technical and non-technical stakeholders.

It is a strong plus if you have: (optional)

• Industry-recognized cybersecurity certifications such as CISSP, CRISC, CISM, or Cloud Security certifications.

Language required for the role:

• Fluent English, both spoken and written.

Eligibility to work in the EU:

• Only candidates with an existing legal right to work in Europe will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.