GRC Analyst – FinTech Cyber Risk & Compliance (Hybrid)

OANDA Corporation; Warszawa; Hybrid; PLN 140,000 - 180,000; Full time

Job summary

OANDA Global Corporation is seeking a cybersecurity & GRC professional to lead governance, risk management, and regulatory compliance efforts. You will work with internal teams, auditors, and regulators while maintaining a hybrid work pattern requiring office presence twice weekly.

Ideal candidates have hands-on policy reviews, risk tracking, and vendor due diligence experience, with knowledge of GDPR, ISO27001, NIST, and PCI-DSS.

Qualifications

• Min. 2 years of experience in Information Security, Risk Management, or GRC.
• Strong knowledge of security frameworks (ISO27001, NIST, SOC2, PCI-DSS).
• Understanding regulations like GDPR, DORA, financial standards.
• Hands-on policy reviews, risk tracking, and control testing.
• Analytical and proactive communication skills.

Responsibilities

• Collect and analyze cybersecurity requirements to align with GDPR, DORA, ISO27001, and financial regulations.
• Monitor controls, KRIs, and KPIs, tracking cyber risks and remediation plans.
• Conduct third-party security due diligence, vendor assessments, and contract reviews.
• Participate in control testing, policy reviews, and documentation updates.
• Assist in creating training materials to defend against malware and phishing.
• Help gather evidence for audits and respond to regulatory questionnaires.

Skills

Information Security

GRC

Regulatory compliance

Risk assessment

Policy reviews

Vendor due diligence

Tools

Vanta

Job description

OANDA Global Corporation is seeking a cybersecurity & GRC professional to lead governance, risk management, and regulatory compliance efforts. You will work with internal teams, auditors, and regulators while maintaining a hybrid work pattern requiring office presence twice weekly.

Ideal candidates have hands-on policy reviews, risk tracking, and vendor due diligence experience, with knowledge of GDPR, ISO27001, NIST, and PCI-DSS.