Cyber Security Policy & Procedure Specialist

Cyber Security Policy & Procedure Specialist

Posted Today by 1770441714

Negotiable
Outside
Hybrid
Warsaw, Masovia

Summary: The Cyber Security Policy & Procedure Specialist role involves developing and implementing cybersecurity governance documentation for Baltic Power, ensuring compliance with European and Polish regulations. The position requires collaboration with various stakeholders and a strong understanding of both IT and OT cybersecurity. The contract is for 10 months with a hybrid working arrangement and an ASAP start date. Experience in critical infrastructure sectors is highly preferred.

Key Responsibilities:

  • Support Baltic Power with the formalization and implementation of cyber security governance documentation
  • Develop policies and procedures that are aligned with European Union Directive and standards as well as Polish regulatory requirements
  • Ensuring alignment of IT and OT cybersecurity governance, including defined roles, responsibilities, and escalation paths
  • Defining security interfaces and responsibility boundaries between asset owners/operators, the TSO, external stakeholders, vendors, service providers, and system integrators
  • Translate regulatory and legal requirements into practical, auditable cybersecurity governance documentation
  • Ensuring traceability between legal and regulatory requirements, security policies, and implemented controls
  • Supporting vendor contracting processes related to Service Agreements in the areas of Cyber Security, IT, and OT
  • Work independently and interface with legal, IT, OT, and operational stakeholders

Key Skills:

  • Proven experience delivering cyber security policies and procedures in regulated environments
  • Hands-on experience with NIS2 and European critical infrastructure regulation
  • Familiarity with Polish cyber security legislation and regulatory expectations
  • Strong understanding of IT and OT cyber security, including industrial control systems
  • Experience in energy, utilities, offshore wind, or other critical infrastructure sectors is highly preferred

Salary (Rate): £850 daily

City: Warsaw

Country: Poland

Working Arrangements: hybrid

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: Other

Detailed Description From Employer:

Cyber Secruity Policy & Procedure Specialist

10 Month contract

Hybrid working

ASAP Start

Major Tasks

  • Ensuring alignment of IT and OT cybersecurity governance, including defined roles, responsibilities, and escalation paths
  • Defining security interfaces and responsibility boundaries between asset owners/operators, the TSO, external stakeholders, vendors, service providers, and system integrators
  • Translate regulatory and legal requirements into practical, auditable cybersecurity governance documentation
  • Ensuring traceability between legal and regulatory requirements, security policies, and implemented controls
  • Supporting vendor contracting processes related to Service Agreements in the areas of Cyber Security, IT, and OT
  • Work independently and interface with legal, IT, OT, and operational stakeholders

PLEASE NOTE:

  • Experience in energy, utilities, offshore wind, or other critical infrastructure sectors is highly preferred

Key Responsibilities

  • Support Baltic Power with the formalization and implementation of cyber security governance documentation
  • Develop policies and procedures that are aligned with European Union Directive and standards as well as Polish regulatory requirements

Key Deliverables

  • Design, structuring, and crafting of cyber security policies and procedures
  • Policies and procedures for the Corporate IT environment

Qualifications

  • Proven experience delivering cyber security policies and procedures in regulated environments
  • Hands-on experience with NIS2 and European critical infrastructure regulation
  • Familiarity with Polish cyber security legislation and regulatory expectations
  • Strong understanding of IT and OT cyber security, including industrial control systems

ersg are an equal opportunities employer; we are committed to promoting equality of opportunity for all job applicants. We do not discriminate against applicants on the basis of age, sex, race, disability, pregnancy, marital status, sexual orientation, gender reassignment or religious background; all decisions are based on merit.