{"id":1366930,"url":"https://alion.io/job/ds-smith-it-grc-information-security-specialist","title":"I&T GRC Information Security Specialist","company":{"id":1795137,"name":"DS Smith","domain":"dssmith.com","url":"https://alion.io/company/dssmith-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":36,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":100000,"period":"year","method":"role_country_seniority_unknown","sample_n":153},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false}],"status":"live","first_seen_at":"2026-08-31T00:00:00Z","employer_posted_date":"2026-08-31","last_verified_at":"2026-10-15T03:01:20Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":46},"description":"Location - Krakow\nWhy is this job for you:\nThe I&T GRC function supports the CISO and IT leadership across a range of information security, cybersecurity and technology risk controls, in support of IT, business, regulatory and customer requirements.\nReporting to the Head of I&T GRC or direct report thereof, the role provides internal information security control consultancy and assessment, supports business and IT stakeholder third party risk management arrangements and operates agreed I&T GRC operated processes or controls.\nYou will:\nSupport creation information and cybersecurity documentation (standards, processes, or guidance) in support of certification and compliance goals in the context of external certification and regulatory compliance requirements (e.g., ISO27001 and EU NIS2 implementation)\n\nOwn or support assigned agreed information security controls operated by I&T GRC e.g., aspects of information security management, risk process management, training and awareness in collaboration with wider team, support desktop simulations\n\nRespond to customer security assurance requirements, and supplier security schedule / assurance\n\nYou have:\nGood working knowledge of recognised information and cybersecurity domains, and standards such as the NIST CSF, ISO27001 or similar\n\nExperience in:\n\ndelivering and working within frameworks such as ISO27001, NIST CSF or similar\n\ninformation security controls design and documentation, assessment and/or assurance\n\ninformation security customer questionnaires, supplier assurance and third-party risk management\n\nfacilitating risk and control processes, or cyber scenario desktop simulations\n\nplanning and delivering information security awareness campaigns\n\nWorking knowledge / practical experience of GRC platforms and/or use of Microsoft tooling, training and awareness or simulated phishing tools\n\nStrong analytical and problem-solving skills\n\nEffective time management skills and ability to plan against multiple competing demands\n\nAbility to build effective working relationships across technology and business stakeholders providing GRC advice and support\n\nAbility to communicate IT, information security or cybersecurity concepts to non-IT stakeholders.\n\nProfessional or academic qualification in relevant subject e.g., Computer Science, Information Security and/or goals to work toward certifications such as ISO27001 lead, ISC2 certifications, CISM, CRISC would be advantageous\n\nFluency in English\n\nThe role may include occasional planned travel (‘on-site’ visits) to DS Smith sites (international) in support of the business engagement outlined. Ability to travel up to 20%","description_format":"text","description_chars":2644,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Manufacturing","Packaging & Labeling","Packaging Design"],"lifecycle":[{"event":"open","at":"2026-09-28T02:34:29Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.408,"p_room":0.44,"age_days":45,"expected_fill_days":41,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ds-smith-it-grc-information-security-specialist","json_url":"https://alion.io/job/ds-smith-it-grc-information-security-specialist.json","meta":{"generated_at":"2026-10-16T02:51:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4359,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1795137},"rest":"https://alion.io/mcp/rest/get_company?id=1795137"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fds-smith-it-grc-information-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fds-smith-it-grc-information-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fds-smith-it-grc-information-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ds-smith-it-grc-information-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fds-smith-it-grc-information-security-specialist"}]}