GRC & InfoSec Analyst — FinTech Risk & Compliance

OANDA TMS Brokers S.A.; Warszawa; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

OANDA TMS Brokers S.A. Warsaw is seeking an Information Security professional to join our hybrid team and strengthen governance, risk management, and regulatory compliance across the organization.

You will align security programs with GDPR, DORA, ISO27001 and other financial standards while collaborating with internal teams and external auditors. You will collect cybersecurity requirements, monitor controls, conduct third-party due diligence, support audit readiness, and help train staff to

Qualifications

• Min. 2 years of experience specifically within Information Security, Risk Management, or GRC.
• Good working knowledge of major security frameworks (ISO27001, NIST, SOC2, PCI-DSS).
• Understanding of key regulations, particularly GDPR, DORA, and financial sector standards.
• Hands-on experience with policy reviews, risk tracking, or control testing.
• Good analytical and communication skills, with a proactive and solution-oriented mindset.

Responsibilities

• Collect and analyze cybersecurity requirements to ensure alignment with GDPR, DORA, ISO27001, and financial regulations.
• Monitor key controls, KRIs, and KPIs, tracking ongoing cyber risks and supporting remediation plans across teams.
• Conduct third-party security due diligence, including vendor assessments, security questionnaires, and contract reviews to mitigate supply chain risks.
• Participate in scheduled control testing, policy reviews, and documentation updates for the security program.
• Assist in creating engaging training materials to defend employees against malware, phishing, and physical security threats.
• Help gather supporting evidence for internal/external audits and assist in responding to regulatory questionnaires.

Skills

Information Security

Risk Management

GRC

Regulatory Compliance

ISO27001

NIST

GDPR

Policy Reviews

Risk Tracking

Tools

Vanta

Job description

OANDA TMS Brokers S.A. Warsaw is seeking an Information Security professional to join our hybrid team and strengthen governance, risk management, and regulatory compliance across the organization.

You will align security programs with GDPR, DORA, ISO27001 and other financial standards while collaborating with internal teams and external auditors. You will collect cybersecurity requirements, monitor controls, conduct third-party due diligence, support audit readiness, and help train staff to