Warsaw, Mazowieckie, Poland
Information security governance, consulting services, compliance audit. Regulations: ISO/IEC 27001, AICPA TSC (SOC 2), GDPR, NIST SP 800-53, EBA Guidelines on ICT and security risk management, DORA.
Direction of security governance and compliance initiatives, ensuring alignment with regulatory requirements and organisational policies. Development and refinement of the security framework to meet industry standards and evolving regulatory requirements. Information Security Management System (ISMS) governance, security and compliance risks management. Oversight of IT assets lifecycle management, including proper classification and protection; Business Impact Analysis (BIA) to assess asset criticality and impact on business operations. Risk management; integration of risk assessment processes into organisational operations. Suppliers’ security verification, including thorough assessments to ensure third-party vendors' compliance with security standards and organisational requirements. Coordination and management of internal and external audits, including evidence gathering, review, and delivery for thorough evaluation and compliance. Administration of the security awareness program, including development and execution of training and assessment initiatives to enhance organisational understanding of security practices.
Information Security Management System (ISMS) implementation, refinement and management. Business Continuity (BC) and Disaster Recovery (DR) governance. Internal and external audits coordination.
Information security compliance audit and consulting services.
Information security compliance audit and consulting services ensuring compliance with information security industry standards.