Vulnerability Management Specialist / 1

Inetum Polska is part of the global Inetum Group and plays a key role in driving the digital transformation of businesses and public institutions. Operating in cities such as Warsaw, Poznan, Katowice, Lublin, Rzeszow, Lodz the company offers a wide range of IT services. Inetum Polska actively supports employee development by fully funding training, certifications, and participation in technology conferences. Additionally, the company is involved in local social initiatives, such as charitable projects and promoting an active lifestyle. It prides itself on fostering a diverse and inclusive work environment, ensuring equal opportunities for all. Globally, Inetum operates in 19 countries and employs over 28,000 professionals. The company focuses on four key areas: Consulting (Inetum Consulting): Strategic advisory services that help organizations define and implement innovative solutions. Infrastructure and Application Management (Inetum Technologies): Designing and managing IT systems tailored to clients’ individual needs. Software Implementation (Inetum Solutions): Deploying partner solutions from industry leaders like Microsoft, SAP, Salesforce, and ServiceNow. Custom Software Development (Inetum Software): Creating unique software solutions to meet specific client needs. With strategic partnerships with major technology giants, including Microsoft, SAP, Salesforce, and ServiceNow, Inetum delivers advanced technological solutions tailored to customer requirements. In 2023, Inetum reported revenues of €2.5 billion, underscoring its strong position in the digital services market. Inetum distinguishes itself by offering a comprehensive range of benefits that meet the diverse needs of employees, providing flexibility, support and commitment. Here's what makes working at Inetum unique: Attractive financial benefits: A cafeteria system that allows employees to personalize benefits by choosing from a variety of options. Generous referral bonuses, offering up to PLN6,000 for referring specialists. Additional revenue sharing opportunities for initiating partnerships with new clients. Professional development and team support: Ongoing guidance from a dedicated Team Manager for each employee. Tailored technical mentoring from an assigned technical leader, depending on individual expertise and project needs. Community and Well-Being: Dedicated team-building budget for online and on-site team events. Opportunities to participate in charitable initiatives and local sports programs. A supportive and inclusive work culture with an emphasis on diversity and mutual respect. We are seeking a Vulnerability Management Specialist to join our Information Security team. The candidate will own and continuously improve the vulnerability management process, perform risk-based prioritization of vulnerabilities, and collaborate closely with IT and business units. This role requires a proactive individual with strong technical security expertise, excellent communication skills, and the ability to translate technical risks into business-relevant messages. Key responsibilities: Vulnerability management: Own and continuously improve the vulnerability management process. Perform risk-based prioritization of vulnerabilities in close collaboration with IT and business units. Monitor remediation SLAs and track critical findings through to closure. Establish and maintain reporting, KPIs, and management dashboards. Coordinate vulnerability scans and assess relevant security advisories. Technical security (core responsibilities): Analyze and secure IT systems, networks, and applications. Design, configure, and continuously optimize automated vulnerability scanning across heterogeneous environments. Validate scan results to eliminate false positives and perform risk assessments using CVSS v3/v4, incorporating internal business impact context. Support implementation and enhancement of technical security controls (e.g., system hardening, access control, network security). Contribute to security assessments, penetration testing, and technical reviews. Support integration of security into development and operations processes (DevSecOps). Analyze security incidents and derive improvement measures. Assist in the selection, implementation, and optimization of security tools. Governance & collaboration: Collaborate with Risk, Compliance, and IT teams. Support audits and regulatory requirements (e.g., ISO 27001, NIS2). Promote security best practices and awareness across the organization. Senior-level communication & presentation capabilities: Ability to translate technical risks into clear, business-relevant messages. Experience preparing and delivering concise management presentations and reports. Strong stakeholder communication skills, including interaction with senior leadership. Capability to provide clear, actionable recommendations for decision-making. Confident communication in management and audit contexts. Must have requirements: Degree in Computer Science, Information Security, or comparable qualification. Professional experience in Information Security / IT Security. Solid experience in Vulnerability Management and working with scanning tools (governance, operations, configuration, monitoring, reporting). Strong understanding of IT infrastructures (networks, operating systems, ideally cloud). Practical knowledge of technical security controls and implementations. Fluent English and Polish (at least B2 level) Nice to have requirements: Experience with security tools (e.g., SIEM, EDR). Knowledge of automation / scripting. Experience in DevSecOps or Cloud Security. Security certifications (e.g., CEH, CISSP, CompTIA Security+). Hybrid work model: 3 days from the office, 2 days of home office. Office locations: Warszawa, Lublin, Poznań On call duty Additional Information We hereby inform you that Inetum Polska sp. z o.o. has implemented an internal reporting (whistleblowing) procedure. The content of the procedure and the possibility to submit an internal report are available at: https://inetum.whispli.com/speakup?locale=pl