Security & QA Technology Specialist

Digital & Technology Team (D&T) is an integral division of HEINEKEN Global Shared Services Center. We are committed to making Heineken the most connected brewery. That includes digitalizing and integrating our processes, ensuring best-in-class technology, and embedding a data-driven culture. By joining us you will work in one of the most dynamic and innovative teams and have a direct impact on building the future of Heineken!

Would you like to meet the Team, see our office and much more? Visit our website: Heineken (heineken-dt.pl)

We are looking for specialists in the areas of IT Security and Quality Assurance to support our Smart Factory (Connected Brewery) portfolio. This is a strategic role focused on shaping standards, assessing risks, and guiding product teams across multiple applications and platforms within IOT domain. The ideal candidate will help define security policies, evaluate risks, and support quality governance. Experience with cloud environments (AWS, Azure), SaaS/PaaS platforms, and IT audits is highly valued.

Your responsibilities would include:

Security:  

• driving and leading security-related initiatives within the Connected Brewery Portfolio
• supporting Supply Chain Connected Brewery Product Teams, Global Functions and Asset Owners with the execution and completion of Business Impact Assessments and Security Assessments  
• supporting Global Functions with the selection, design and implementation of security requirements and controls of their digital solutions  
• developing and maintaining dashboards for Business Impact Assessments and Security Assessments, maintaining the Assessment funnel based on priority and planning assessments based on the expiration of the assessment  
• identifying potential security threats, vulnerabilities and risks, assessing severity and proposing mitigations  
• supporting with writing, updating and reviewing the policies in the Security Policy   
• maintaining awareness of emerging security industry trends, best practices and evaluating them for applicability  
• supporting Product Teams and Global Functions to identify and drive opportunities to increase the efficiency of information security 
• designing, implementing, and maintaining governance frameworks for digital products and services within the Smart Factory ecosystem. 

Quality Assurance & Services: 

• designing testing strategy&plans based on project requirements and user needs and following Service Integration and Management (SIAM) practices 
• assisting in tracking bugs/nonconformities and building insightful metrics 
• collaborating with teams to refine development processes and make quality assurance more efficient across the portfolio 
• building Knowledge and Best Practices for development & testing that can be scaled and applied in different products 
• ensuring products meet internal standards and any applicable regulations (e.g., ISO, GDPR, industry-specific rules) 
• maintaining awareness of emerging technologies, industry trends, and testing best practices
• delivering product enhancements with the allocated timescale and quality standards that minimize rework and aspire to a zero-defect culture 
• defining and monitoring service management KPIs to ensure optimal performance, availability, and reliability of Smart Factory applications and platforms
• developing and maintaining clear service catalogues, SLAs, and OLAs for internal and external stakeholders
• facilitating regular service reviews, audits, and risk assessments to identify and mitigate potential issues
• supporting change management processes and ensuring proper documentation of changes, incidents, and problem resolutions
• tracking emerging technologies and trends in IT and Industry 4.0 to propose improvements in service governance practices. 

You are a good match if you have:

• 5+ of proven track record in Cybersecurity/ IT audit
• solid understanding of cloud architectures, networking, and cybersecurity principles (one of the following qualifications is a plus: CISSP, CISM, ISSMP, CISA, CIA, CSTA, CSTP, CIIP, CFIP, CSIS, CMI, CWSA)
• experience with business impact and security assessments, ability to explain cybersecurity governance and its processes to business stakeholders
• demonstrated ability to write reports, procedures, policies, and communicate effectively in a variety of situations
• experience with security tools, monitoring platforms, and ticketing systems
• ability to work across a broad range of business and IT-related subject-matter areas.

You are a perfect match if you also have:

• certification ITIL/Prince/Scrum
• experience with safety, maintenance and continuous improvement processes in a manufacturing environment
• understanding of (batch) manufacturing modelling, integration, and security standards, primarily: ISA88/95/99
• experience with the development, deployment and maintenance of mobile (iOS & Android) and SaaS apps.

At HEINEKEN Kraków, we take integrity and ethical conduct seriously. If someone has concerns about a possible violation of legal regulations indicated in Polish Whistleblowing Act or our Code of Business Conduct, we encourage them to speak up. Cases can be reported to global team or locally (in line with the local HGSS Whistleblowing procedure) by selecting proper option in this tool or by communicating it on hotline.