Wybierz usługę po lewej lub skontaktuj się z nami mailowo!
What you'll be responsible for:
We are seeking an DSPM Lead who is responsible for designing, implementing, and managing the firm’s Data Security Posture Management capabilities across cloud, hybrid, and on‑premise environments. This role provides continuous visibility into where sensitive data resides, how it is accessed, whether it complies with global regulations, and how its security posture can be strengthened. The position serves as a bridge between Information Security, Data Governance, Risk & Compliance, and GTech to ensure data‑level protection across all regions and systems. The ideal candidate will have hands-on expertise in DSPM technology.
Responsibilities
-
Sensitive Data Discovery & Classification:
-
-
Lead automated discovery of sensitive and regulated data across cloud platforms, SaaS, databases, and on prem systems, as described in DSPM core components.
-
-
Ensure classification and tagging of PII, PHI, financial, client, and regulated data based on policy and regulatory requirements.
-
Risk Assessment & Exposure Analysis
-
-
Continuously assess data exposure risks, excessive permissions, and misconfigurations across environments.
-
-
Evaluate compliance alignment with ISO 27001, NIST 800‑53, GDPR, HIPAA, SOX, and internal standards.
-
Data Security Controls & Remediation
-
-
Collaborate with Identity & Access Management to enforce least‑privilege access and remove excessive permissions.
-
-
Recommend and implement security controls such as encryption, masking, tokenization, and DLP policies.
-
-
Work with platform and application teams to remediate identified data security gaps.
-
-
Monitoring & Reporting
-
-
Provide continuous monitoring of data access patterns, anomalies, and compliance posture across hybrid environments.
-
-
Deliver automated reporting to Security, Compliance, IT Leadership, and audit stakeholders.
-
Track and report metrics related to risk reduction, compliance, and overall data security posture.
-
Policy Alignment & Governance Collaboration
-
-
Ensure alignment between DSPM strategy and the firm’s Data Lifecycle Management (DLM) and Data Governance programs.
-
-
-
Support the development and enforcement of data‑centric security policies, standards, and operating procedures.
-
-
-
Work with Data Owners and Stewards to validate classification requirements and ensure ongoing data protection across the lifecycle.
-
-
Tool & Technology Enablement
-
-
Partner with GTech and Enterprise Architecture to ensure integrations align with global DSPM frameworks and strategy.
-
-
-
Experience with DSPM vendor solutions (e.g., Veronis, Proofpoint, Cyberhaven) based on business needs and risk posture.
-
-
Cross‑Functional Incident Response Support
-
-
Support escalations for data‑related security incidents in coordination with Legal, Compliance, GTech, and Business units.
-
-
-
Participate in investigations involving data leakage, unauthorized access, or policy violations.
-
Our expectations:
Skills
-
Attention to detail and accuracy
-
Strong problem-solving and analytical abilities
-
Collaborative mindset across IT, Legal, and Compliance
-
Ability to translate compliance requirements into technical controls
-
Commitment to continuous improvement and data stewardship
- Fluency in Polish and English
Education / Professional Experience/ Qualifications
-
Required Qualifications
-
-
Bachelor’s degree in Information Management, Library Science, Computer Science, Business Administration, or a related field.
-
-
-
5+ years of experience in Data Management, Data/Information Governance, or Compliance within a digital environment.
-
-
-
Deep understanding of DSPM concepts: data discovery, classification, lineage, access governance, risk scoring, and remediation workflows.
-
-
-
Experience with cloud security architecture across Azure, AWS, and SaaS platforms.
-
-
-
Strong understanding of IAM controls, RBAC, Conditional Access, and data‑level access models.
-
-
-
Knowledge of encryption, masking, tokenization, and secure data handling practices.
-
-
-
Strong familiarity with GDPR, HIPAA, SOX, ISO 27001, NIST frameworks, and global data protection laws.
-
-
-
Ability to interpret regulatory requirements into technical and operational controls.
-
-
-
Ability to analyze complex data landscapes and identify risks and remediation priorities.
-
-
-
Strong communication skills for preparing executive‑ready dashboards and reports.
-
-
-
Ability to collaborate with cross‑functional teams globally (US, EU, APAC).
-
-
Preferred Qualifications
-
-
5+ years in Information Security, Data Governance, or Cloud Security programs.
-
-
-
Experience working within multinational environments with complex data architectures.
-
-
-
Certifications: CISSP, CISM, CCSP, Azure Security Engineer, or equivalent.
-
-
-
Prior experience deploying DSPM technologies or building governance frameworks.
-
What we offer:
-
Hybrid working model (2 days in the office and 3 days working remotely).
-
Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform.
-
Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world.
-
A culture based on teamwork, trust, and knowledge sharing.
-
A well-structured onboarding program to support a smooth start and successful integration into your new role.
-
Clear career development paths and access to learning and certification programs.
-
Access to training platforms and tools that support professional growth.
-
An inclusive workplace that welcomes people with disabilities.
-
A modern office in Poznań, located in Malta Office Park.
Jak przebiega rekrutacja?
-
Wybierz interesującą Cię ofertęZnajdź stanowisko, które Cię interesuje, na liście poszukiwanych przez nas profili:
-
ZaaplikujWyślij swoje CV w języku polskim w odpowiedzi na interesującą Cię ofertę.
-
Daj się poznać!Jeżeli pasujesz do profilu osoby, której poszukujemy, zaprosimy Cię na spotkanie online. W rozmowie weźmie udział rekruter oraz Twój przyszły menedżer. Porozmawiamy o Twoich dotyczasowych doświadczeniach i obecnej sytuacji zawodowej, a także o aspiracjach na przyszłość. Spodziewaj się pytań z obszarów merytorycznych, a jeśli stanowisko tego wymaga – to również krótkiej rozmowy po angielsku.
-
Wypatruj odpowiedziJeśli wszystko poszło dobrze, otrzymasz od nas ofertę współpracy. Jeśli nie – powiemy, co miało wpływ na naszą decyzję.
-
Witamy na pokładzie!Ustalimy dogodny dla obu stron termin i formę rozpoczęcia współpracy.
-
Is it possible to work remotely?We work in a hybrid model that combines the flexibility of remote work with the benefits of in-person collaboration. Regular presence in our Poznań office is important to us, typically 2-3 days per week. For more details about the working model, feel free to ask during the recruitment process.
-
What is the dress code at Grant Thornton?We ask that you follow specific guidelines depending on the business situation. When working independently—and provided there are no scheduled meetings with clients or business partners—a casual dress code applies; you can wear whatever is comfortable, such as a T-shirt, jeans, or a casual shirt. After all, hardly anyone sits at home in a suit and tie or a formal business suit unless they have to. However, if meetings are scheduled, your attire should be more formal and appropriate for the client. You will certainly receive detailed information about these guidelines before you start at GT, so you know what to expect.
-
Will I always receive feedback after a job interview?We always get back to candidates with feedback—regardless of the recruitment outcome—within a maximum of two weeks following the interview. This contact may be via phone or email. We also inform candidates if the recruitment process takes longer than expected. We strive to ensure our candidates always know the current status of their application.
-
What are the possible forms of cooperation?We offer employment based on a contract of employment (Umowa o Pracę). Details regarding the employment terms are discussed during the recruitment process.