We are looking for a Security Expert to join our Global Security Assurance team, supporting Provident all over the globe. In this role, you will act as a technical authority for server access and end-user device security, as well as security and resilience testing, ensuring security is embedded by design across projects, IT changes, and operational environments.
Key responsibilities:
Servers and end-user devices security
Technical authority in ICT Controls for servers and end user devices.
Lead from the security area the design, implementation, and continuous improvement of servers and end user devices ICT policies, standards and baselines.
Works with IT Teams to ensure proper implementation of related requirements.
Partner with IT and Security functions to identify and resolve servers and end-user devices ICT defects.
Define criteria and measure effectiveness of ICT controls in the area of servers and end user devices, providing structured insight into control effectiveness and continuous improvement.
Security & Resilience Testing
Own and coordinate the end-to-end security and resilience testing lifecycle, including planning, execution, remediation, and reporting.
Define testing requirements based on business, regulatory, and security needs.
Manage relationships with external testing providers and ensure quality delivery.
Validate results, assess risks, provide remediation recommendations, and maintain a knowledge base of findings and lessons learned.
Deliver testing reports for internal stakeholders and regulatory requirements.
You will also support:
Support the development and maintenance of ICT security policies, standards, procedures, and controls.
Identify, assess, and mitigate ICT risks.
Ensure compliance with regulatory requirements and industry frameworks, including ISO 27001, NIST, and CIS Controls.
Support security monitoring, investigations, and incident response activities.
Monitor emerging threats and regulatory developments, providing expert guidance to stakeholders.
Collaborate with global Security, IT, and business teams to strengthen the overall cybersecurity posture.
Lead cross-functional initiatives and influence stakeholders across multiple geographies.
Act as a trusted security advisor for business and technology teams.
What we're looking for
Strong expertise in server and end-user device security.
Experience in security assurance, vulnerability management, penetration testing, or resilience testing.
Knowledge of security frameworks and standards (ISO 27001, NIST, CIS Controls).
Ability to assess risk, define security requirements, and drive remediation activities.
Strong stakeholder management skills and experience working in global, cross-functional environments.
What we can offer:
Stable employment – 93% of people are employed under an employment contract for an indefinite period.
Safety – we have been on the Polish market for 29 years.
Friendly work environment – we have received the Top Employer award 13 times in a row.
Hybrid work – we usually meet in the office twice a week (Dworzec Gdański metro station).
Extra 3 days of paid leave – if you use all your leave in a given calendar year.
Private medical care with appointment guarantee service (Medicover).
Full implementation under the supervision of a mentor, including a package of professional implementation training.
Access to the development platform, including e-learning training, podcasts and webinars.
Activities supporting development in the organization, e.g. the "Effective Manager" training series for people holding managerial positions.
Business telephone (also for private use).
Access to the ProviBenefity cafeteria platform, which is supplied with a monthly amount to be used, or subsidies for your Multisport card - you choose from 5 types of cards.
Life insurance (UNUM Życie TUiR S.A.) on preferential terms.
Christmas benefits and co-financing for the "Holidays under the pear tree" holiday for you and your children.
Psychological support for employees, including: care of a psychologist (including children's), psychotherapist, dietician, coaching.
Skills Required
- Strong expertise in server and end-user device security
- Experience in security assurance, vulnerability management, penetration testing, or resilience testing
- Knowledge of ISO 27001, NIST, and CIS Controls
- Ability to assess risk, define security requirements, and drive remediation activities
- Strong stakeholder management and experience working in global, cross-functional environments
What We Do
Provident Polska S.A. is a leading provider of cash loans in Poland and a part of the international financial group International Personal Finance (IPF). The company offers convenient, safe, and fast loan solutions to customers both online and through direct channels. Operating since 1997, the company has provided financial services to over 4.5 million Polish citizens, establishing itself as a market leader in the industry.
