Control Analyst

Mindbox Sp. z o.o.; Kraków; Hybrid; PLN 90,000 - 170,000; Full time

Benefits offered by this job

Flexible cooperation model

Hybrid work Kraków

Collaborative team culture

Continuous development

Interpolska Health Care

Multisport card

Warta Insurance

Laptop provided

Job summary

Mindbox Sp. z o.o. w Krakowie poszukuje analityka kontrolnego (SDLC i kontrole deploy) odpowiedzialnego za wdrożenie i udostępnienie praktyk zgodności w globalnej funkcji cyberbezpieczeństwa.

Dołączysz do zespołu, który wspiera zespoły inżynerskie w bezpiecznym i zgodnym dostarczaniu oprogramowania. Wymagane jest doświadczenie w środowisku Agile, umiejętność prezentowania dowodów zgodności oraz znajomość narzędzi takich jak ServiceNow.

Qualifications

• Doświadczenie w środowisku Agile dostarczania oprogramowania.
• Umiejętność definiowania i prezentowania dowodów zgodności na audytach.
• Znajomość narzędzi do delivery zmian (np. ServiceNow).
• Dobra znajomość ram governance, risk i controls.
• Świetne umiejętności komunikacyjne z interesariuszami, prowadzenie warsztatów.
• Umiejętność raportowania i analizy danych (Excel, PowerPoint, Visio).
• Angielski na wysokim poziomie (pisemny i ustny).

Responsibilities

• Definiowanie i wdrażanie praktyk SDLC i kontroli deploymentu, szkolenie zespołów w zakresie zgodności.
• Przeprowadzanie kontroli zmian i dokumentowanie ustaleń.
• Zapewnianie audytowalnych dowodów zgodności (testy, akceptacje, logi zmian).
• Monitorowanie metryk DevOps i identyfikacja trendów, rekomendacja działań naprawczych.
• Tworzenie i prowadzenie szkoleń oraz komunikacji w celu adopcji procesów SDLC/DEPL.
• Prowadzenie warsztatów i sesji roboczych z interesariuszami w celu osiągnięcia konsensusu.
• Usprawnianie dokumentacji i procesów, aby zapewnić łatwiejszą zgodność dla zespołów inżynierskich.

Skills

Agile delivery

Compliance evidence

Stakeholder engagement

English communication

Reporting & analysis

Workshop facilitation

Governance & risk

Visio process mapping

Excel & PowerPoint

Tools

ServiceNow

Jira

Confluence

Google Data Studio

Excel Power Query

Job description

O projekcie:

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.

Join Our Team as a Control Analyst (SDLC and Deployment Controls)!

Are you passionate about governance, risk controls, and enabling engineering teams to deliver secure and compliant software? We are looking for a Control Analyst to help implement and drive adoption of SDLC and Deployment (DEPL) controls within a global cybersecurity function.

Sounds like your kind of challenge?

LI‑Hybrid – 6x/month from the office in Kraków

What you get in return

• Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)
• Hybrid work setup – 6x/month from the office in Kraków
• Collaborative team culture – work alongside experienced professionals eager to share knowledge
• Continuous development – access to training platforms and growth opportunities
• Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
• High quality equipment – laptop and essential software provided

Wymagania:

• Proven experience in an Agile delivery environment (e.g., Change/Control Analyst, Business Analyst, Test Analyst).
• Strong ability to define and present compliance evidence for audits or assurance.
• Working knowledge of change delivery and related tools (e.g., ServiceNow or equivalent).
• Good understanding of governance, risk, and control frameworks.
• Excellent stakeholder engagement and facilitation skills, including running workshops.
• Proficiency with reporting and analysis tools (Excel, PowerPoint, process mapping with Visio).
• Strong communication skills in English – both written and verbal.

Desirable Skills

• Familiarity with DevOps metrics and performance tracking.
• Industry certifications: ITIL, Agile/SAFe, IIBA.
• Experience using QA/test management tools (qTest, Tricentis, Zephyr).
• Knowledge of application security testing (SAST/DAST/MAST) and vulnerability management.
• Hands‑on experience with Jira, Confluence, ServiceNow, and reporting tools such as Google Data Studio or Excel Power Query.

Codzienne zadania:

• Define and embed good practice: clarify expectations for SDLC and Deployment controls and coach teams on compliance.
• Run spot-checks: conduct control‑related reviews for Cyber changes and applications; document findings and track remediation.
• Evidence and reporting: ensure complete, audit‑ready compliance evidence (testing records, approvals, change logs) and maintain regulatory reporting.
• Monitor DevOps metrics: track software delivery KPIs, identify gaps or trends, and recommend corrective actions.
• Training and enablement: develop and deliver training and communications to drive adoption of SDLC/DEPL processes and metrics.
• Stakeholder management: lead workshops and working sessions to align expectations, resolve issues, and build consensus.
• Continuous improvement: simplify workflows and improve documentation to make compliance more seamless for engineering teams.

Joining this project you’ll become part of Mindbox – a tech‑driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.