Hybrid, Krakow, Poland; Annecy, France 

We are seeking an Senior Information Security Manager to collaborate closely with the Director in implementing the Information Security Management System (ISMS), overseeing the company's vulnerability management reporting, and leading security projects.

In this role, you will be accountable for managing a team, ensuring the execution of security measures, and maintaining accurate vulnerability reports aligned with the established security standards. Success in this position demands a blend of technical expertise, strong communication skills, and a profound understanding of cybersecurity principles.

What you will be doing:

• Support Information Security Managers, development teams, and various IT and Cybersecurity teams in vulnerability management, risk analysis, and architecture.
• Develop and maintain strong relationships with Product Owners, Project Managers, and Group Functions.
• Help the cybersecurity teams to strengthen the cybersecurity knowledge (architecture, risks, projects) and help to develop the cybersecurity team.
• Understand business objectives and lead discussions on risks in business terms, conducting risk analysis for IT and business projects, including vendor assessment, and ensuring projects are delivered 'Secure by design'.
• Use KPIs to report risks to owners and follow up with dedicated action plans.
• Manage and organize vendor and subcontractor audits and assessments.
• Raise awareness of cybersecurity issues among stakeholders and participate in cybersecurity events to foster a culture of cybersecurity awareness.
• Identify opportunities for improving services provided by the team to stakeholders.

What you need to succeed:

• Minimum of 10 years of experience in cybersecurity or a related field. 
• Proven experience in managing a vulnerability program. 
• Demonstrated experience in conducting risk assessment process, vendor risk assessment and vulnerability management process.  
• Familiarity with industry-standard cybersecurity certifications is required. 
• Cybersecurity certifications required (ISO 27001, Iso 27005, CISSP or equivalent) 
• Excellent communication and interpersonal skills. 
• Project management skills to plan and execute projects effectively. 
• Strong understanding of cybersecurity principles, architecture, threats, and best practices. 
• String knowledge in vulnerability management and secdevops mentoring. 

What’s in it for you:

• Discounts on Quality Products: Benefit from compelling discounts on our own-brand products (including Salomon, Atomic, Peak Performance, and more)..
• Meaningful Projects: Contribute to responsible projects with dedicated teams, making a real impact and driving positive change..
• Continuous Learning: Access our e-learning platform with a wealth of engaging learning content to expand your knowledge and skills.
• Engaging Company Culture: Experience a workplace with a strong team spirit and an open, appreciative culture, where you'll feel valued and part of a supportive community.
• Smooth Transition: Benefit from a comprehensive onboarding program designed to help you integrate seamlessly into our organization.
• Work-Life Balance: Enjoy flexible working hours and the option for mobile working or a home office setup.
• Active Lifestyle: Embrace a healthy lifestyle with a wide range of sports opportunities and access to our on-site gym.
• Financial Security: Secure your financial future with subsidies for our company pension plan and employee profit-sharing plan.
• Eco-Friendly Transportation: Choose sustainable transportation options with our job bike program, promoting a green commute and a healthier you.
• Global Exposure: Collaborate with a diverse, international team spanning North America, Asia Pacific, and beyond.

Our Candidate-Centric Hiring Process:

At Amer Sports, we believe in making your journey through our hiring process as seamless and engaging as possible. We are committed to finding the best talent to join our team, and we appreciate the effort and time you invest in exploring opportunities with us. Here's a glimpse of what you can expect:

1. CV Screening
2. Phone Screening
3. First Interview with Information Systems Security Director
4. Second interview with HR and Director, Cybersecurity & Risk Management 
5. Feedback & Decision

Apply now!

If you have any questions or need clarification at any stage of the application process or during your journey with us, please don't hesitate to reach out to selja.kaartinen@amersports.com (HR). We're here to provide you with the support and information you need to make your experience with Amer Sports as smooth and enjoyable as possible. Your success and satisfaction are our top priorities, and we're always here to assist you!