Risk Analyst
⚲ Warszawa
11 970 - 14 070 PLN (B2B)
Wymagania
- risk management
- Cybersecurity
- NIST
- ISO
- Communication skills (nice to have)
- GDPR (nice to have)
Opis stanowiska
O projekcie:
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
As a Third-Party Risk Analyst, you will play a critical part in protecting Equinix from third-party cybersecurity and operational risks. This role involves executing risk-based due diligence, monitoring supplier security posture, and supporting Equinix’s Third-Party Risk Management (TPRM) program in line with industry and regulatory standards.
Sounds like your kind of challenge?
What you get in return
- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – remote days available depending on the client’s arrangements - 2 days a week from the office in Warszawa
- Collaborative team culture – work alongside experienced professionals eager to share knowledge
- Continuous development – access to training platforms and growth opportunities
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
- High quality equipment – laptop and essential software provided
Wymagania:
Required Skills:
- 3–5 years’ experience in risk management, cybersecurity risk, or IT risk
- Expertise in conducting vendor cybersecurity assessments and due diligence reviews
- Knowledge of frameworks: NIST, ISO 27001, SOC 2
- Strong analytical and problem-solving skills
- Ability to assess risk under uncertainty and propose actionable solutions
- Excellent written and verbal communication skills
Nice to Have:
- Experience in tech, financial services, or regulated environments
- Familiarity with regulatory standards: DORA, GDPR, SOX
Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
Codzienne zadania:
- Perform cybersecurity and risk assessments on third parties using standardized industry frameworks
- Evaluate supplier security posture, controls, and compliance with Equinix standards
- Analyze risk across multiple domains: information security, data privacy, and business continuity
- Assign risk ratings and document findings according to TPRM standards
- Detect control gaps and vulnerabilities; recommend remediation plans
- Track and document remediation progress with vendors and internal teams
- Escalate high-risk findings based on defined governance thresholds
- Support continuous monitoring: threat intelligence reviews, security ratings, vendor performance updates
- Track changes in risk posture and support periodic reassessments
- Partner with Procurement, Security, Legal, and Business Units to enable risk-based decisions
- Communicate risk findings effectively to technical and non-technical stakeholders
- Maintain accurate and auditable records of assessments and decisions
- Ensure compliance with TPRM policies, industry standards, and regulations (e.g., DORA, NIST, ISO)
- Support audits and regulatory reviews with necessary documentation
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
As a Third-Party Risk Analyst, you will play a critical part in protecting Equinix from third-party cybersecurity and operational risks. This role involves executing risk-based due diligence, monitoring supplier security posture, and supporting Equinix’s Third-Party Risk Management (TPRM) program in line with industry and regulatory standards.
Sounds like your kind of challenge?
What you get in return
- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – remote days available depending on the client’s arrangements - 2 days a week from the office in Warszawa
- Collaborative team culture – work alongside experienced professionals eager to share knowledge
- Continuous development – access to training platforms and growth opportunities
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
- High quality equipment – laptop and essential software provided
Wymagania:
Required Skills:
- 3–5 years’ experience in risk management, cybersecurity risk, or IT risk
- Expertise in conducting vendor cybersecurity assessments and due diligence reviews
- Knowledge of frameworks: NIST, ISO 27001, SOC 2
- Strong analytical and problem-solving skills
- Ability to assess risk under uncertainty and propose actionable solutions
- Excellent written and verbal communication skills
Nice to Have:
- Experience in tech, financial services, or regulated environments
- Familiarity with regulatory standards: DORA, GDPR, SOX
Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
Codzienne zadania:
- Perform cybersecurity and risk assessments on third parties using standardized industry frameworks
- Evaluate supplier security posture, controls, and compliance with Equinix standards
- Analyze risk across multiple domains: information security, data privacy, and business continuity
- Assign risk ratings and document findings according to TPRM standards
- Detect control gaps and vulnerabilities; recommend remediation plans
- Track and document remediation progress with vendors and internal teams
- Escalate high-risk findings based on defined governance thresholds
- Support continuous monitoring: threat intelligence reviews, security ratings, vendor performance updates
- Track changes in risk posture and support periodic reassessments
- Partner with Procurement, Security, Legal, and Business Units to enable risk-based decisions
- Communicate risk findings effectively to technical and non-technical stakeholders
- Maintain accurate and auditable records of assessments and decisions
- Ensure compliance with TPRM policies, industry standards, and regulations (e.g., DORA, NIST, ISO)
- Support audits and regulatory reviews with necessary documentation
🔍 Dekoder Ogłoszenia
🔴
Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)
Chociaż oferują wybór formy współpracy, forma B2B jest często preferowana przez firmy ze względu na niższe koszty, co może oznaczać brak pełnych świadczeń pracowniczych.
🔴
Hybrid work setup – remote days available depending on the client’s arrangements - 2 days a week from the office in Warszawa
Elastyczność pracy zdalnej jest uzależniona od klienta, co może oznaczać, że w praktyce liczba dni pracy zdalnej może być mniejsza niż sugeruje ogłoszenie.
🟡
Collaborative team culture – work alongside experienced professionals eager to share knowledge
Może to oznaczać, że zespół jest mały i wszyscy muszą sobie nawzajem pomagać, co czasami przekłada się na dodatkowe obowiązki wykraczające poza zakres stanowiska.
🟡
Continuous development – access to training platforms and growth opportunities
Dostęp do platform szkoleniowych jest standardem, a 'wzrost możliwości' może być ogólnikowy i nie gwarantować konkretnych awansów czy podwyżek.
🔴
Ability to assess risk under uncertainty and propose actionable solutions
Oczekuje się od kandydata samodzielności w rozwiązywaniu problemów w niejasnych sytuacjach, co może oznaczać brak jasno zdefiniowanych procesów lub wsparcia.