TRCI-26-06807

Operational Risk assessment Analyst

This contract role sits in the CISO/OCRA team in Poland and focuses on assessing cybersecurity risks from third-party and nth-party vendors with access to sensitive information or systems. The core requirements are at least five years of third-party or cybersecurity assessment experience, the ability to assess vendor controls and compliance, and the ability to recommend remediation and communicate findings to stakeholders and management. Familiarity with regulatory guidance and frameworks such as NIST, ISO, COBIT, and DORA is relevant; security and risk certifications and cloud assessment experience are advantages. The description calls for strong written and spoken English, analytical skills, and effective stakeholder communication. The structured location is Krakow and the employment type is contract; work mode is not specified. The given title emphasizes operational risk, while the duties are specifically focused on third-party cybersecurity risk assessment.

Apply for this role See all roles

Position summary

Location: Poland
Workplace: Hybrid
Employment: Contract
Experience: Minimum 5 years and Maximum 6 years

Apply now

Role overview

Why This Role Matters.

Your Impact

Deliver Enterprise Value

Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.

Collaboration

Work Across Teams

Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.

Growth

Learn Continuously

Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.

Career Path

Grow With Ubique

Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.

Responsibilities

What You'll Be Doing.

Every role at Ubique contributes directly to solving meaningful business challenges for our clients.

Knowledge in regulatory guidelines and requirements: FRBNY, FINMA, MAS, HKMA, DORA etc.

Knowledge and specialist in 3rd to Nth party security risk oversight and assessment

Knowledge on internal / external and regulator engagements

Cyber and Information security or data privacy related certifications (e.g. CISSP, CISM, CISA or CRISC) are an advantage.

Ability to communicate both written and verbal for business key partners and management audience. Excellent negotiation, influencing and analytical skills are highly desired

Knowledge in NIST Cybersecurity Framework and NIST 800 series documents and other such related frameworks: COBIT/ITIL/ISO

Information Security audit or risk assessment experience in complex IT environments, including Cloud technologies would be beneficial.

Proven ability to work both independently and as part of a team to deliver quality work in a fast-paced environment

Flexibility and ability to think creatively and to identify new ways to approach old problems

Phenomenal analytical, decision-making, and problem-solving skills

Dedication to fostering an inclusive culture and value varied perspectives.

5+ years of experience in third-party risk assessment or cybersecurity assessment;

Technology stack

Tools & Technologies.

The platforms and technologies you'll use to build modern, enterprise-grade solutions.

Third-Party Risk Management

Required

TPRM

Required

Nth-party risk

Required

Cybersecurity risk assessment

Required

Vendor security assessment

Required

Information security

Required

Data privacy

Required

NIST Cybersecurity Framework

Required

NIST CSF

Required

NIST 800 series

Required

ISO 27001

Required

PCI DSS

Required

COBIT

Required

ITIL

Required

SOC 2

Required

DORA

Required

FRBNY

Required

FINMA

Required

MAS

Required

HKMA

Required

Requirements

Skills & Experience.

We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.

Essential

Required Qualifications

At least five years of third-party risk assessment or cybersecurity assessment experience

Third-party and nth-party cybersecurity risk oversight and assessment

Assessment of vendor security controls, policies, procedures, and compliance

Knowledge of applicable regulatory requirements and guidelines, including those listed in the description

Knowledge of cybersecurity and risk frameworks, including NIST Cybersecurity Framework and NIST 800-series documents

Development or recommendation of risk mitigation and remediation measures

Assessment reporting and communication with internal stakeholders, committees, and management

Strong written and spoken English

Preferred

Nice to Have

Information security audit or risk assessment in complex IT environments

Cloud technology security assessment experience

Knowledge of ISO 27001, PCI DSS, COBIT, ITIL, or SOC 2

Certifications such as CISSP, CISM, CISA, CRISC, CTPRP, CEH, or ITIL

Experience with internal, external, or regulatory engagements

What you'll gain

More Than Just A Job.

We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.

Global Exposure

Collaborate with international clients and multicultural teams on enterprise programmes.

Continuous Learning

Expand your expertise through mentoring, certifications and hands-on project experience.

Career Growth

Take ownership, develop leadership skills and grow your consulting career over time.

Flexible Working

Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.

People First

Join a supportive culture where collaboration, respect and long-term relationships come first.

Enterprise Projects

Work on meaningful technology initiatives for leading organisations across industries.

Apply

Apply for Operational Risk assessment Analyst

One page, about two minutes. We only ask for what we actually need to have a first conversation.