Egis operates as a consulting, design, and engineering company specializing in transport and municipal infrastructure, environmental protection, general and industrial construction, and the energy sector. Across all these fields, we provide our clients with comprehensive consulting and engineering services at every stage of an investment project, from planning (including environmental impact assessments, feasibility studies, and financial and economic analyses), through design, to construction supervision and project implementation oversight.

Egis Poland is looking for an IT Specialist who will also act as the Regional Information Security Manager for the EURA region, based in Poland. The role combines day-to-day IT support and local IT budget management for our Warsaw teams with the regional security function. It is part of the Group CIO Office and reports also functionally to the Group CISO.

The RISM scope covers the EURA region, including the largest entities in the UK, Ireland, Poland, Romania, Serbia, Ukraine, Israel, Morocco, South Africa, and others.

As Regional Information Security Manager, the holder represents the Group CISO across the EURA region, implements and monitors the Group information security policy locally, and reports risks and needs to the Group CISO. The role has delegated authority within the limits set by the Group CISO.

Responsibilities:

• IT support:
  • Handle incidents and requests in ServiceNow, with timely resolution and clear communication with users
  • Handle user account management and permissions in Microsoft 365
  • Manage end-user hardware: deployment, configuration, repair, and asset records
  • Keep the CMDB up to date and validated, with a regularly reconciled list of IT assets (hardware, software, and licences)
  • Support local business applications, including Symfonia, Płatnik, Norma, and others
  • Take part in the migration of local infrastructure to Microsoft Azure, with security requirements built in
  • Provide basic network support for the local LAN
  • Coordinate with the Group and external providers to resolve incidents and manage modernizations
• Budget:
  • Manage the local IT budget across both entities, including security-related spend: track spend, decide what is needed within the budget, and contribute to forecasting. All spend requires approval.
• Security:
  • Implement and monitor the Group information security policy across the EURA region, and propose local adjustments to Group guidelines
  • Assess security risks, threats, and vulnerabilities for EURA entities and propose prevention and remediation plans
  • Act as the local point of contact for security incidents, coordinate the response with the SOC, and escalate major or critical incidents to the Group CISO
  • Approve or reject requests for privileged access to local systems, applying least privilege
  • Coordinate internal and external security audits and act as the local contact for external audits
  • Run the security awareness programme for the EURA region, including translations and local examples
  • Oversee security compliance of local service providers and validate local IT projects against Group security requirements
• Reporting:
  • Report regularly on regional security status, incidents, and KPIs to the Group CISO
• Documentation:
  • Maintain technical documentation, procedures, and user guides

Requirements

• At least 6 years of experience in IT, IT security, or both, ideally in an international or multi-site context
• Master's degree or 5-year higher education in computer science, engineering, or security
• Working knowledge of Microsoft 365, Windows systems, and IT architectures
• Knowledge of international security standards and frameworks (ISO 27001, ISO 27005, NIST, GDPR) and of security and IT law in the countries concerned
• Experience in risk management (ISO 27005, EBIOS or similar)
• Experience with a ticketing system, ideally ServiceNow
• Understanding of incident management tools and processes (SIEM, SOC)
• Ability to lead local stakeholders on security issues and to manage conflicts between security requirements and business constraints
• Polish: native
• English: B2 minimum, highly communicative (C1 preferred)

Nice to have:

• Security certification such as CISSP, CISM, or ISO 27001 Lead Implementer / Lead Auditor
• Working knowledge of Microsoft Azure, or AZ-104 certification
• Experience with business continuity planning (BCP) testing
• Experience with infrastructure migration, system deployments, or M&A integration
• Experience with IT budget planning, cost tracking, or forecasting
• Familiarity with Sekocenbud, Norma, Autodesk, Bentley, Bricscad, and other engineering software
• PowerShell scripting

What we offer

• Employment contract with transition to permanent employment after the trial period
• Open to B2B cooperation
• Private medical care and group life insurance
• Sports card
• Flexible working hours (flexible start between 7:00 and 9:00)
• Free English and French classes
• Work in and experienced team and within the Group CIO Office
• Opportunities for professional development