{"id":3455140,"url":"https://alion.io/job/jti-information-security-risk-manager","title":"INFORMATION SECURITY RISK MANAGER","company":{"id":447001,"name":"JTI","domain":"jti.com","url":"https://alion.io/company/jti-2","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":57000,"max_usd":103000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-10-18T02:00:00Z","employer_posted_date":"2026-10-18","last_verified_at":"2026-11-02T21:59:02Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"At JTI we celebrate differences, and everyone truly belongs. 46,000 people from all over the world are continuously building their unique success story with us.83% of employees feel happy working at JTI.\nTo make a difference with us, all you need to do is bring your human best.\nWhat will your story be? Apply now!\nLearn more: jti.com\nInformation Security Risk Manager\n\nAbout the Role:\nThe Information Security Risk Manager plays a pivotal role in JTI’s efforts to identify, assess, and manage information security and IT risks. This position ensures that information security risks are clearly understood, effectively managed, and aligned with JTI’s strategic objectives.\nYou will be responsible for implementing robust risk management practices, strengthening IT & Security risk governance, ensuring compliance with international standards and regulations, and collaborating closely with stakeholders across Digital & IT, Security, Legal, Compliance, and Enterprise Risk Management (ERM). You will also support the implementation and enhancement of automated risk management processes and tools, such as ServiceNow GRC.\nWhat will you do - Responsibilities:\nRisk Identification & Assessment\nConduct regular IT and information security risk assessments across systems, applications, networks, and third-party vendors\nIdentify cybersecurity threats, vulnerabilities, and areas of non-compliance\nMonitor emerging IT and cyber risks based on evolving technologies and threat intelligence\nRisk Mitigation & Control Development\nDevelop and implement effective risk mitigation strategies\nDesign and recommend security controls to protect IT infrastructure and sensitive information\nPartner with Digital & IT, Security, and business teams to embed controls into processes\nMonitoring & Reporting\nDefine and maintain Key Risk Indicators (KRIs) and KPIs for IT and cyber risks\nPrepare clear risk reports and dashboards for senior leadership and key stakeholders\nEscalate critical risks and incidents in a timely manner\nGovernance & Compliance\nMaintain and enhance the IT & Security Risk Management governance framework (policies, risk appetite, playbooks, operating cycle)\nEnsure compliance with industry standards (e.g. ISO 27001, NIST) and regulatory requirements (e.g. GDPR)\nSupport internal and external audits and security assessments\nCollaboration, Awareness & Resilience\nAct as a key liaison between IT, Security, Legal, Compliance, ERM, and business teams\nPromote a risk-aware culture through training and awareness initiatives\nContribute to incident response planning, resilience initiatives, and post-incident investigations\nWho are we looking for - Requirements:\nBachelor’s degree in Cybersecurity, Information Technology, or a related field\nMaster’s degree is an advantage\nProfessional certifications such as CISSP, CISM, or CRISC are highly desirable\n5+ years of experience in information security, IT risk management, cybersecurity, or a related field\nHands-on experience with risk assessments, risk reporting, and security governance\nExperience working with security frameworks (e.g. NIST, COBIT)\nKnowledge of cloud security and modern IT environments\nExperience with risk automation platforms (e.g. ServiceNow GRC) is a strong plus\nStrong understanding of information security principles, technologies, and risk management methodologies\nAnalytical mindset with excellent problem-solving skills\nAbility to communicate complex security concepts to non-technical stakeholders\nStrong collaboration and stakeholder management skills\nFluent spoken and written English\nWhat are the next steps - Recruitment process:\nThank you very much for your interest in the role. You are welcome to apply.\nAre you ready to join us? Build your success story at JTI. Apply now!\nNext Steps:\nAfter applying, if selected, please anticipate the following within 1-3 weeks of the job posting closure: Phone screening with Talent Advisor > Assessment tests > Interviews > Offer. Each step is eliminatory and may vary by role type.\nAt JTI, we strive to create a diverse and inclusive work environment. As an equal-opportunity employer, we welcome applicants from all backgrounds. If you need any specific support, alternative formats, or have other access requirements, please let us know.","description_format":"text","description_chars":4266,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Tobacco, Vapes & Smoking Accessories","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-29T12:38:13Z"}],"visa":[],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.875,"p_room":0.75,"age_days":16,"expected_fill_days":20,"reasons":["conf:7","velocity","win:late","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/jti-information-security-risk-manager","json_url":"https://alion.io/job/jti-information-security-risk-manager.json","meta":{"generated_at":"2026-11-03T06:42:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9306,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":447001},"rest":"https://alion.io/mcp/rest/get_company?id=447001"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjti-information-security-risk-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjti-information-security-risk-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjti-information-security-risk-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jti-information-security-risk-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjti-information-security-risk-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3455140}},{"tool":"search_jobs","arguments":{"company":"jti.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3455140},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}