security-analyst

beqom is a comprehensive compensation management platform designed to bring clarity, equity, and motivation to the workforce. Since 2009, beqom has been pioneering compensation technology solutions for enterprises by integrating pay management, transparency, and equity into a seamless system. Its cutting-edge platform utilizes AI to optimize compensation processes, offering precision, scalability, and compliance for businesses across all industries. With a focus on ensuring fair employee compensation aligned with performance, beqom supports organizations in managing total compensation costs effectively while maintaining global compliance standards.

A complete compensation suite that does everything you want it to do. Bringing clarity, equity, and motivation to your workforce.

beqom is a purpose-built compensation platform that intuitively gives employers the power to realize comp’s full potential from end to end, every day. We help the world's leading enterprises leverage their talent through complete, equitable, and transparent performance and rewards. 

With unified data, complete pay management solutions, and AI-enabled pay intelligence, beqom enables companies to comply with regulatory requirements, optimize compensation decisions, and achieve better business results.

With beqom, employees know their worth, excel in their roles, and receive fair rewards for their efforts.

#CompComplete

beqom

• Receive, triage, and complete inbound GRC / security questionnaires submitted by existing and prospective clients as part of their vendor assessment and TPRM processes.
• Develop and maintain a master response library to accelerate questionnaire completion, covering areas such as data security, access controls, business continuity, incident response, and privacy.
• Coordinate with internal stakeholders (Engineering, Product, Operations, Legal) to gather accurate, up-to-date technical evidence and supporting documentation.
• Track questionnaire status, deadlines, and outcomes; maintain a central log and escalate blockers in a timely manner.
• Build relationships with client procurement, risk, and security contacts to manage ongoing TPRM obligations efficiently.
• Manage questionnaires that require formal documentary evidence — such as policies, audit reports (e.g. SOC 2, ISO 27001), penetration test summaries, data processing agreements, and certifications.
• Maintain a structured evidence repository, ensuring documents are current, version-controlled, and accessible for rapid submission.
• Identify gaps between client evidence requirements and the company's current documentation; work with the Head of Information Security and Compliance or relevant leads to close those gaps.
• Review information security, data protection, and compliance clauses within Master Service Agreements (MSAs) and other commercial contracts from clients and prospects.
• Identify obligations and requirements (e.g. audit rights, subprocessor notifications, breach notification timescales, data residency, encryption standards) and assess the company's ability to comply.
• Liaise with Legal counsel and the Head of Information Security and Compliance to flag materially onerous or non-standard terms; assist in drafting redlines and proposed alternative language where appropriate.
• Maintain a tracker of contractual information security obligations to ensure ongoing compliance post-signature.
• Design and operate a structured TPRM programme for the company's own vendors and sub-contractors who process client data or have access to company systems.
• Conduct initial and periodic risk assessments of vendors, including completion of security questionnaires, review of their compliance certifications, and assessment of contractual controls.
• Categorise vendors by risk tier and ensure appropriate due diligence is applied proportionate to the nature and sensitivity of the relationship.
• Maintain a vendor risk register, tracking assessment outcomes, remediation actions, and review schedules.
• Report on vendor risk posture to relevant internal stakeholders on a regular cadence.

Compliance and Information Security Analyst

Compliance & Information Security Analyst at beqom managing GRC and vendor risk management processes. Focused on ensuring compliance and data protection in a hybrid work setting.

Infotree Global Solutions is a staffing and workforce management company that aims to meet the career needs of individuals while ensuring client satisfaction through its resources. It is heavily focused on recruitment and consultant care, providing opportunities across various industries such as automotive, engineering, IT, finance, and banking. Founded in 2002, Infotree Global Solutions operates globally, with more than 5,000 coworkers and 400 recruiters in 150 countries. The company is committed to delivering quality placements that lead to lifelong careers, supported by a dedicated team of recruiters and consultant care representatives.

Infotree Global was founded in 2002 in a small office in Canton, MI, Infotree Global had a clear mission; To bring the world’s best talent together with the greatest companies producing results through continuous improvement and innovation.  From those humble beginnings, Infotree Global has explosively grown from a two-person operation to a global solutions company, functioning in over 150 countries across 5 different continents.  

Infotree Global proudly serves more than 250 of the Global 1000, numerous government agencies, and some of the world’s largest nonprofit organizations.  Our sustained growth is attributed to our focus and commitment to our thousands of full-time professionals.  In today’s market, where high-quality dedicated individuals are in demand; Infotree Global recognizes that an emphasis on understanding, achieving, and exceeding our employee’s goals, aspirations and overall experience is paramount. This “people over profits” mindset has yielded tremendous success for our employees and clients.  Our employees have a vast array of assignments available across the world to help achieve and exceed their career goals and our clients have motivated, dedicated, and hardworking professionals on their team.  We are here to help the best talent work with the greatest companies to produce innovative results in a variety of industries including but not limited to IT, Engineering, Clinical, Skilled Trades, Finance and Accounting.  

Our mission’s success is supported by several industry awards and accolades. If you are looking for a committed and understanding partner, your search ends here.

Infotree Global Solutions

• Support proactive threat hunting, threat intelligence, and incident response activities in collaboration with Senior Analysts
• Execute hypothesis-driven threat hunts and investigative analysis across endpoint, identity, cloud, and network telemetry
• Assist in assessing, investigating, and responding to high-priority security events under the guidance of senior analysts and management
• Analyze adversary behavior using MITRE ATT&CK and current realworld threat activity
• Partner with Vulnerability Management to apply threat intelligence to vulnerability prioritization, risk assessment, and remediation efforts
• Contribute to exposure management by identifying misconfigurations, attack paths, and chained weaknesses across the environment
• Help translate intelligence findings, hunt results, and exposure insights into actionable detection and response recommendations
• Collaborate with SOC, Privacy, Legal, Compliance, IT, Vulnerability Management, and business stakeholders during investigations
• Produce clear, well-structured documentation and investigation summaries for leadership and incident records

Security Analyst – Incident Response, Threat Intelligence

Security Analyst focusing on incident response and threat intelligence for Infotree Global Solutions. Collaborating on investigations and proactive security analysis across the global enterprise environment.

• Support proactive threat hunting, threat intelligence, and incident response activities
• Conduct hypothesis-driven threat hunts across endpoint, identity, cloud, and network telemetry
• Assist in investigating and responding to high-priority security events
• Analyze adversary behavior using MITRE ATT&CK and real-world threat intelligence
• Collaborate with Vulnerability Management to prioritize and remediate security risks
• Identify misconfigurations, attack paths, and chained weaknesses across environments
• Translate threat intelligence findings into actionable detection and response recommendations
• Work closely with SOC, Privacy, Legal, Compliance, IT, and business stakeholders
• Prepare clear documentation and investigation summaries for leadership and incident records

Security Analyst – Threat Intelligence, Incident Response

Security Analyst defending enterprise systems against cyber threats. Supporting threat intelligence and incident response activities in a global biotechnology organization.

EY is a global leader in assurance, tax, transaction, and advisory services. The firm helps businesses to manage their risks, optimize their operations, and enhance their overall performance. EY is dedicated to building a better working world for its clients and employees through innovative solutions and a commitment to quality.

EY is building a better working world by creating new value for clients, people, society, the planet, while building trust in the capital markets.Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.EY teams in more than 150 countries work across a full spectrum of services in assurance, consulting, tax, strategy and transactions, strengthened by sector experience and diverse ecosystem partners. Find out more about the EY global network: http://ey.com/en_gl/legal-statement

• Actively participate in the engagements conducting following tasks: participate in meetings with Clients, support to develop concepts, solutions, methods required to fulfil projects objectives
• Support for business development activities, including methodology development, proposal writing, and direct support for presentation to potential clients
• Working with technologies and solutions utilized in cybersecurity and networks (SIEM, Firewalls, IAM, IDS/IPS, End Point Protection, Authentication and Authorization control, Cloud etc.)
• Develop professional documents in the form reports, analysis, methodologies in the English language
• Testing the latest OT Security tools & solutions in the EY OT/IoT Lab
• With AI-powered solutions your analyses, insights and innovative ideas will reach a higher level.

OT Security Analyst

OT Security Analyst at EY's IoT/OT Security HUB, supporting cybersecurity engagements and developing solutions for the EMEIA region.

Hybrid Security Analysts roles in Poland

Browse 4 hybrid security analysts roles hiring in Poland plus related opportunities such as security engineer, cybersecurity, risk, security operations, compliance, threat intelligence specialist and incident response analyst.

4 jobs found

Compliance and Information Security Analyst

beqom

Security Analyst – Incident Response, Threat Intelligence

Infotree Global Solutions

Security Analyst – Threat Intelligence, Incident Response

Infotree Global Solutions

OT Security Analyst

EY