Cybersecurity Risk & Controls Specialist — Finance

Luxoft; Wrocław; On-site; PLN 170,000 - 240,000; Full time

Job summary

Luxoft is seeking an IT Risk and Controls Expert to strengthen our cybersecurity programme. You will evaluate security controls, assess IS risks, and provide expert guidance to support risk-based decision-making and continuous improvement.

Responsibilities include managing cybersecurity activities, conducting security assessments, and driving third-party risk discussions with stakeholders across the organization. A strong background in finance/regulatory environments is preferred.

Qualifications

• Experience in Information Security or cybersecurity with risk management.
• Experience in financial services or regulated environments.
• Familiarity with NIST CSF, ISO 27001, CIS Controls, or COBIT.
• Ability to translate technical findings into business language.
• Strong risk remediation and stakeholder influence.
• Knowledge of cloud security concepts.
• Experience assessing third-party service providers.
• Excellent analytical and problem-solving skills.

Responsibilities

• Lead cybersecurity activities, including IS risk identification, assessment, and remediation.
• Conduct security assessments of internal projects and third-party vendors.
• Provide security advisory to stakeholders in business-friendly language.
• Coordinate and manage security-related projects to align with objectives.
• Drive third-party risk discussions and remediation actions.

Skills

Info Security

Cybersecurity

IT Risk Management

Regulated environments

NIST CSF

ISO 27001

Security advisory

Stakeholder communication

Cloud security

Third-party risk

Job description

Luxoft is seeking an IT Risk and Controls Expert to strengthen our cybersecurity programme. You will evaluate security controls, assess IS risks, and provide expert guidance to support risk-based decision-making and continuous improvement.

Responsibilities include managing cybersecurity activities, conducting security assessments, and driving third-party risk discussions with stakeholders across the organization. A strong background in finance/regulatory environments is preferred.