Security Expert (Servers, End-User Devices & Security Testing)

We are looking for a Security Expert to join our Global Security Assurance team, supporting Provident all over the globe. In this role, you will act as a technical authority for server access and end-user device security, as well as security and resilience testing, ensuring security is embedded by design across projects, IT changes, and operational environments.

Key responsibilities

Servers and end-user devices security

• Technical authority in ICT Controls for servers and end user devices.
• Lead from the security area the design, implementation, and continuous improvement of servers and end user devices ICT policies, standards and baselines.
• Works with IT Teams to ensure proper implementation of related requirements.
• Partner with IT and Security functions to identify and resolve servers and end-user devices ICT defects.
• Define criteria and measure effectiveness of ICT controls in the area of servers and end user devices, providing structured insight into control effectiveness and continuous improvement.

Security & Resilience Testing

• Own and coordinate the end-to-end security and resilience testing lifecycle, including planning, execution, remediation, and reporting.
• Define testing requirements based on business, regulatory, and security needs.
• Manage relationships with external testing providers and ensure quality delivery.
• Validate results, assess risks, provide remediation recommendations, and maintain a knowledge base of findings and lessons learned.
• Deliver testing reports for internal stakeholders and regulatory requirements.

You will also support

• Support the development and maintenance of ICT security policies, standards, procedures, and controls.
• Identify, assess, and mitigate ICT risks.
• Ensure compliance with regulatory requirements and industry frameworks, including ISO 27001, NIST, and CIS Controls.
• Support security monitoring, investigations, and incident response activities.
• Monitor emerging threats and regulatory developments, providing expert guidance to stakeholders.
• Collaborate with global Security, IT, and business teams to strengthen the overall cybersecurity posture.
• Lead cross-functional initiatives and influence stakeholders across multiple geographies.
• Act as a trusted security advisor for business and technology teams.

What we're looking for

• Strong expertise in server and end-user device security.
• Experience in security assurance, vulnerability management, penetration testing, or resilience testing.
• Knowledge of security frameworks and standards (ISO 27001, NIST, CIS Controls).
• Ability to assess risk, define security requirements, and drive remediation activities.
• Strong stakeholder management skills and experience working in global, cross-functional environments.

What we can offer

• Stable employment – 93% of people are employed under an employment contract for an indefinite period.
• Safety – we have been on the Polish market for 29 years.
• Friendly work environment – we have received the Top Employer award 13 times in a row.
• Hybrid work – we usually meet in the office twice a week (Dworzec Gdański metro station).
• Extra 3 days of paid leave – if you use all your leave in a given calendar year.
• Private medical care with appointment guarantee service (Medicover).
• Full implementation under the supervision of a mentor, including a package of professional implementation training.
• Access to the development platform, including e-learning training, podcasts and webinars.
• Activities supporting development in the organization, e.g. the "Effective Manager" training series for people holding managerial positions.
• Business telephone (also for private use).
• Access to the ProviBenefity cafeteria platform, which is supplied with a monthly amount to be used, or subsidies for your Multisport card - you choose from 5 types of cards.
• Life insurance (UNUM Życie TUiR S.A.) on preferential terms.
• Christmas benefits and co-financing for the "Holidays under the pear tree" holiday for you and your children.
• Psychological support for employees, including: care of a psychologist (including children's), psychotherapist, dietician, coaching.