Cyber Security Resilience Operations Specialist

What sets us apart drives us ahead: between local roots and global relevance, we are a unique blend of tradition and future, of foundation and growth. We value bright minds and inspire them to grow with their ideas. Come and shape the future of finance with us.

Warsaw | up to 40% working from home | Reference 7950

The Cyber Security Resilience Operations Specialist supports the day-to-day operation of the Cyber Security Resilience services, with a strong focus on service desk activities, operational follow-up, and audit support.

The role acts as the first operational layer for File Integrity Monitoring (FIM), Secure Configuration Baseline (SCB), and Vulnerability Management, relieving senior engineers and analysts from administrative, evidentiary, and coordination tasks while ensuring consistency, quality, and audit readiness.

What You Will Do

• Operational & Service Desk Support
• Act as the primary point of contact for service desk requests and tickets related to: File Integrity Monitoring (FIM), Secure Configuration Baseline (SCB / CIS Benchmarks), Vulnerability Management activities
• Triage, track, and coordinate operational tickets, ensuring timely handling and clear communication with stakeholders.
• Perform initial analysis and validation of findings (e.g. expected vs. unexpected changes, status of vulnerabilities, baseline deviations) before escalation.
• Maintain operational documentation, runbooks, and FAQs related to Cyber Security Resilience services.
• Tool-Based Operational Activities
• Operate and support Cyber Security Resilience tooling on a daily basis, including retrieving data, validating results, and supporting reporting activities.
• Assist in maintaining data quality and consistency across FIM, SCB, and Vulnerability Management tools.
• Support recurring operational tasks such as: Report generation, Status checks, Evidence extraction, Follow-up tracking
• This role is not responsible for tool engineering, rule development, or architecture, but requires a solid understanding of how the tools work and how results should be interpreted.
• Audit & Compliance Support
• Actively support internal and external audit activities (e.g. FINMA, DORA, internal audits) by extracting audit evidence directly from Cyber Security Resilience tools, ensuring evidence is complete, traceable, and aligned with audit requests, supporting responses to audit questions in coordination with senior team members.
• Maintain structured audit evidence repositories and support continuous audit readiness.
• Help standardise and streamline evidence collection processes to reduce broader team workload.
• Coordination & Stakeholder Support
• Liaise with infrastructure, platform, and operations teams on operational clarifications and ticket follow-ups.
• Support the Cyber Security Resilience team by absorbing operational overhead, allowing engineers and specialists to focus on analysis and improvement initiatives.
• Escalate operational risks, recurring issues, or data gaps to senior team members in a structured manner.

What You Bring

• Solid foundational understanding of cyber security concepts, particularly: Vulnerability management, Secure system configuration / CIS Benchmarks, File integrity and change monitoring
• Hands-on experience working with security or infrastructure tooling, ideally in an operational or service-oriented role.
• Familiarity with ticketing systems, SLAs, and operational support models.
• Experience supporting audits, compliance activities, or evidence collection is a strong advantage.
• Structured, detail-oriented, and reliable in execution.
• Comfortable working with operational data, evidence, and repetitive tasks while maintaining quality.
• Able to communicate clearly with both technical and non-technical stakeholders.
• Proactive in identifying inefficiencies or improvement opportunities in operational processes.
• English Fluency
• German advantage

If you have any questions, check out our FAQ page or call Agnieszka Leputa at .

For this vacancy we only accept direct applications.

Diversity is important to us. Therefore, we are looking to receiving applications regardless of any personal background.