GRC Analyst

OANDA TMS Brokers S.A.; Warszawa; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

OANDA TMS Brokers S.A. Warsaw is seeking an Information Security professional to join our hybrid team and strengthen governance, risk management, and regulatory compliance across the organization.

You will align security programs with GDPR, DORA, ISO27001 and other financial standards while collaborating with internal teams and external auditors. You will collect cybersecurity requirements, monitor controls, conduct third-party due diligence, support audit readiness, and help train staff to

Qualifications

• Min. 2 years of experience specifically within Information Security, Risk Management, or GRC.
• Good working knowledge of major security frameworks (ISO27001, NIST, SOC2, PCI-DSS).
• Understanding of key regulations, particularly GDPR, DORA, and financial sector standards.
• Hands-on experience with policy reviews, risk tracking, or control testing.
• Good analytical and communication skills, with a proactive and solution-oriented mindset.

Responsibilities

• Collect and analyze cybersecurity requirements to ensure alignment with GDPR, DORA, ISO27001, and financial regulations.
• Monitor key controls, KRIs, and KPIs, tracking ongoing cyber risks and supporting remediation plans across teams.
• Conduct third-party security due diligence, including vendor assessments, security questionnaires, and contract reviews to mitigate supply chain risks.
• Participate in scheduled control testing, policy reviews, and documentation updates for the security program.
• Assist in creating engaging training materials to defend employees against malware, phishing, and physical security threats.
• Help gather supporting evidence for internal/external audits and assist in responding to regulatory questionnaires.

Skills

Information Security

Risk Management

GRC

Regulatory Compliance

ISO27001

NIST

GDPR

Policy Reviews

Risk Tracking

Tools

Vanta

Job description

Fancy helping to shape the future of FinTech? We have always been innovators. In 1996 we were the first company to share exchange rate information, free of charge on the internet. Today, we are a world leading online trading group.

Join us to:

• Help build the future of online trading
• Be part of a culture driven by integrity and global impact
• Become part of an award-winning company - check out our full list of awards here

We are only as good as our people. Luckily, our people are the best.

How do we work?

Hi Everyone! We build, maintain, and drive the evolution of our Information Security Program - ensuring strong governance, risk management, and regulatory compliance across the organization. From aligning with global frameworks like NIST CSF and ISO27001:2022 to seamlessly integrating Cyber Risk into Enterprise Risk Management, we keep our operations secure, resilient, and audit-ready. Working closely with internal teams, external auditors, and regulatory bodies, we protect our ecosystem while enabling continuous growth. We work in a hybrid model - we'd love to meet you in the office 2 times a week with respect to your own commitments.

In this role, you will:

• Collect and analyze cybersecurity requirements to ensure alignment with GDPR, DORA, ISO27001, and financial regulations.
• Monitor key controls, KRIs, and KPIs, tracking ongoing cyber risks and supporting remediation plans across teams.
• Conduct third-party security due diligence, including vendor assessments, security questionnaires, and contract reviews to mitigate supply chain risks.
• Participate in scheduled control testing, policy reviews, and documentation updates for the security program.
• Assist in creating engaging training materials to defend employees against malware, phishing, and physical security threats.
• Help gather supporting evidence for internal/external audits and assist in responding to regulatory questionnaires.

What skillset do you need to be successful in this role?

• Min. 2 years of experience specifically within Information Security, Risk Management, or GRC, but impact matters more than years.
• Good working knowledge of major security frameworks (ISO27001, NIST, SOC2, PCI-DSS).
• Understanding of key regulations, particularly GDPR, DORA, and financial sector standards.
• Hands-on experience with policy reviews, risk tracking, or control testing.
• Good analytical and communication skills, with a proactive and solution-oriented mindset.

Nice to have:

• Knowledge of GRC tools (preferably Vanta).
• Relevant industry certifications e.g., Security+, ISO27001 Auditor/Implementer, CRISC.
• Previous involvement in risk management (evaluation, management of risk treatment plans etc.).
• Prior experience in the Financial Services or Trading industry.

Your perspective matters.

___ At OANDA, to help us efficiently process applications, we use AI-driven tools to help source and rank candidates based on professional experience and skills. While these tools provide recommendations, our recruitment process remains human-centric: all final shortlisting and hiring decisions are made by OANDA team. You have the right to request a human review of your application.

OANDA Global Corporation is a diverse and global team with offices around the world. We value the unique skills and experiences each individual brings to OANDA. We are committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide an inclusive and accessible environment for everyone.

Candidates selected for an interview will be contacted directly.

If you require accommodation during the recruitment and selection process, please let us know.

We will work with you to provide as seamless a recruitment experience as possible.

OANDA aims to transform all aspects of how the world interacts with currencies, whether that be trading or utilizing currency data and information. We'll do this our way – connecting and collaborating with the best and most innovative to grow quickly and globally. We strive to do more than just our jobs, focus our actions on collective goals and dare to seek out innovation and creativity. All this to continue our obsession with providing the best experience for our customers. Innovation has been at the heart of everything we do! From our roots in 1997 providing free currency exchange information over the internet to launching an award-winning global trading business. We work together to drive the future of currency data solutions and trading technology. Our customers can invest in around 200 financial instruments including currencies, shares (over 1300) and commodities leveraging intelligent support and the newest technologies. What is more, we are now offering a batch of popular cryptocurrencies in the US!

- OANDA is now a major global player. We are proud to be recognized! We put our clients at the heart of our innovation and services, which has earned us some of the most recognized awards in the industry. Most Trusted Broker, Compare Forex Brokers’ Awards, 2025 Best in Class for Mobile Trading Apps, ForexBrokers.com Annual Awards, 2025 Best Forex/CFD Broker in AMER, TradingView Broker Awards, 2024 Broker of the Year 2023, TradingView Broker Awards, 2023