Senior Specialist - Information Security Governance, Risk and Compliance - Gdansk or Viby
Arla
⚲ Gdańsk
Wymagania
- IT Security
Opis stanowiska
Are you passionate about building resilient IT environments and ensuring business continuity at scale? We are looking for an experienced Information Security specialist to contribute to the development and maturity of Arla’s global IT Continuity & Disaster Recovery framework. In this role, you will play a pivotal part in supporting business impact assessments and in shaping standards, templates, and role descriptions for IT resilience services, while contributing to compliance with regulations such as NIS2. You will help safeguard Arla’s operations by ensuring that our systems are prepared for, and able to recover from, operational disruptions. Anchored within the Information Security GRC team in the CISO organization, the role involves close collaboration with IT & Digital teams, Supply Chain, and external partners to support consistent and effective continuity and recovery practices across the organisation. How you will make an impact You will play a key role supporting and contributing to Arla’s IT Continuity & Disaster Recovery agenda, helping ensure that IT systems, applications, and platforms are resilient and aligned with NIS2 requirements. In this role, you will work closely with colleagues across IT and Supply Chain, contributing to the development, implementation, and ongoing operation of continuity and recovery capabilities across the organization. • Establish and maintain the IT Continuity & Disaster Recovery framework, embedding it across IT and business units and supplier engagements. • Develop internal policies, controls, and monitoring practices meet the IT operational resilience and Arla Business requirements. • Support Business Impact Assessments to identify critical business functions, assess risks, and understand the potential impact of disruptions. • Guide through standardising practises for developing and maintaining system recovery strategies and procedures to ensuring effective and timely restoration of services. • Support NIS2 compliance activities by working with stakeholders across IT and the business to ensure continuity and recovery practices align with regulatory expectations. • Partner with IT Operations and other teams to embed continuity and recovery considerations into business processes and new initiatives. • Work closely with IT Risk Management adhering to risk-based reporting to executive leadership. • Participate in awareness activities and exercises to ensure preparedness and a strong recovery culture across the organization. • Regularly test, review, and enhance continuity and recovery plans to address evolving threats and business needs. What will make you successful You have solid experience within IT Continuity and Disaster Recovery strategies for complex IT environments, supporting the design and implementation of continuity and recovery measures, including defining and applying Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). You have contributed to the development, documentation, and testing of system availability and recovery plans. You are able to plan and manage your own tasks effectively, following up on actions and contributing reliably to larger initiatives. You collaborate well with stakeholders across IT, Operations, and Supply Chain , and are comfortable working in a complex stakeholder environment and international environment, engaging with people of different cultures and from various backgrounds. Furthermore: • Master’s degree in Information Security, Cybersecurity, IT or a related field. • 5+ years of experience in Information Security, working with continuity and recovery strategies. • Strong knowledge of regulatory and compliance frameworks such as NIS2, GDPR, ISO 27001, NIST. • Certifications like CISSP and CISM are highly valued in the recruitment process. • Excellent communication skills, with the ability to present complex security topics to senior leadership and non-technical stakeholders. • Experience in Agile delivery methodology would be a plus. • Experience working in a large, global organization with a complex technology landscape. • Ability to work in a fast-paced, dynamic environment and persistence in achieving goals. • Proactive mindset and a commitment to continuous improvement. • Speak and write English effortlessly. What do we offer? At Arla, you join a workplace where culture is not a slogan but a clear guide for how we work, decide, and collaborate. Our culture is built on Good Growth DNA, Good Values, and Good Leadership, meaning we focus on long‑term, responsible growth while caring for people, customers, farmers, and the world around us. In this team, you will work with skilled and engaged colleagues who value collaboration, openness, and trust. We encourage people to take ownership, speak up, and contribute ideas, and you will have real influence on solutions and ways of working. The environment is professional but informal, with a strong sense of cooperation and shared responsibility. We offer a workplace where development is supported, leadership is present and approachable, and success is achieved together. You become part of a global company with a strong purpose – while still experiencing a collaborative team environment where people know each other and actively support each other’s success. Would you like to join us? If you want to seize this exciting opportunity, please apply as soon as possible, we are reviewing applications as they arrive. Shape the Future of Dairy Arla is a global leader in the dairy industry, committed to enabling good food choices that make life better, providing people with natural, sustainable nourishment, while taking care at every step to ensure Arla is a choice they can feel good about. If you are looking to shape the future with an ambitious global cooperative that truly cares about your growth, where everyone feels valued and empowered, and collaboration is the core of culture, Arla is a choice you can feel good about.