01
TRCI-26-06401
Senior Third Party Cyber and Information Security Analyst
This contract role sits in the CISO / Third Party Cyber and Information Security Oversight Remediation Team, reviewing remediation evidence for cyber control gaps identified in third-party risk assessments. The core requirements are 5+ years in third-party risk or cybersecurity assessments and regulatory or audit issue closure, an audit mindset, and the ability to assess vendor controls and communicate practical remediation requirements. A bachelor's degree and relevant professional certification are stated; credentials such as CTPRP, CISSP, CISA, CISM, CRISC, CEH, or ITIL and familiarity with NIST, ISO 27001, PCI DSS, COBIT, or SOC 2 are additional assets. The structured experience band is 5–7 years, and the role is based in Krakow on a contract basis with a hybrid requirement of at least three office days per week. The description does not specify the client’s industry or a detailed technology platform.
Position summary
- Location
- Poland
- Workplace
- Hybrid
- Employment
- Contract
- Experience
- Minimum 5 years and Maximum 7 years
Role overview
Why This Role Matters.
This contract role sits in the CISO / Third Party Cyber and Information Security Oversight Remediation Team, reviewing remediation evidence for cyber control gaps identified in third-party risk assessments. The core requirements are 5+ years in third-party risk or cybersecurity assessments and regulatory or audit issue closure, an audit mindset, and the ability to assess vendor controls and communicate practical remediation requirements. A bachelor's degree and relevant professional certification are stated; credentials such as CTPRP, CISSP, CISA, CISM, CRISC, CEH, or ITIL and familiarity with NIST, ISO 27001, PCI DSS, COBIT, or SOC 2 are additional assets. The structured experience band is 5–7 years, and the role is based in Krakow on a contract basis with a hybrid requirement of at least three office days per week. The description does not specify the client’s industry or a detailed technology platform.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
business risk management, or regulatory and audit issue experience in NFRI/operational risk issues closure, in line with standard procedures.
03
exposure to cyber tech risk assessments of third-party vendors to identify potential security threats and vulnerabilities outcome.
04
analyze and evaluate vendor security controls, policies, and procedures to ensure compliance with regulatory requirements and industry best practices.
05
develop and implement risk mitigation strategies to address identified vulnerabilities and reduce the organization's exposure to cyber threats.
06
communicate assessment findings and recommendations (including control requirements) to internal stakeholders, including senior management, legal, and compliance teams.
07
monitor and track vendor compliance with security policies and procedures through ongoing assessment activities.
08
Bachelor's degree with professional certification in Cybersecurity or Audit, Cloud Security or a related field of study;
09
5+ years of experience in third-party risk assessment or cybersecurity assessment and regulatory and audit issue closure
10
Closely monitor and suggest the remediation requirements to third parties & business stakeholders
11
ability to communicate effectively with both technical and non-technical stakeholders;
12
strong analytical and problem-solving skills;
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
third-party risk management
Required
02
TPRM
Required
03
third-party cyber risk
Required
04
vendor risk assessment
Required
05
supplier risk assessment
Required
06
cybersecurity assessment
Required
07
information security
Required
08
cybersecurity controls
Required
09
control-gap remediation
Required
10
Risk Treatment Plan
Required
11
remediation evidence
Required
12
risk mitigation
Required
13
NFRI
Required
14
operational risk
Required
15
audit issue closure
Required
16
CIS risk assessment
Required
17
NIST
Required
18
ISO 27001
Required
19
PCI DSS
Required
20
COBIT
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
5+ years of experience in third-party risk assessment or cybersecurity assessment and regulatory or audit issue closure
Cybersecurity control-gap remediation review, including assessment of evidence submitted for Risk Treatment Plan closure
Evaluation of third-party/vendor security controls, policies, and procedures against requirements and best practices
Business risk management or regulatory, audit, NFRI, or operational-risk issue closure in line with procedures
Risk identification, analysis, articulation, and development of practical mitigation requirements
Effective communication of assessment findings and control requirements to technical and non-technical stakeholders
Ongoing monitoring and tracking of vendor compliance through assessment activities
Bachelor's degree and professional certification in cybersecurity, audit, cloud security, or a related field, as stated in the description
Strong analytical and problem-solving skills
Preferred
Nice to Have
CTPRP, CISSP, CISA, CISM, CRISC, CEH, or ITIL certification
Experience with NIST, ISO 27001, PCI DSS, COBIT, or SOC 2
Experience working with compliance, operational risk, outsourcing, supplier management, or senior management stakeholders
Project coordination or leadership experience
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Senior Third Party Cyber and Information Security Analyst
One page, about two minutes. We only ask for what we actually need to have a first conversation.