Hybrid IT Risk & Compliance Consultant for Global Frameworks

EY; Katowice; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

EY GDS Poland is seeking an IT Risk & Compliance Consultant in Digital Risk to join a high-performing international team delivering IT regulatory compliance, cybersecurity maturity and IT control framework services to global clients.

You will translate regulatory requirements into practical controls and support design, assessment and enhancement of compliance across ISO 27001, NIST CSF, PCI DSS, GDPR, COBIT and ITIL, collaborating across IT, security and business stakeholders.

Qualifications

• 3–5 years of relevant experience in IT risk, cybersecurity, compliance or assurance.
• English working proficiency (B2 and above).
• Working proficiency (B2 and above) in at least one additional language: French, German, Spanish, Dutch or Italian.
• Experience with ISO 27001, PCI DSS, HIPAA / HITRUST, GDPR, COBIT or ITIL is advantageous.

Responsibilities

• Support design and review of IT regulatory and compliance frameworks across ISO 27001, NIST CSF, PCI DSS, HIPAA, HITRUST, GDPR, COBIT, ITIL.
• Perform cyber / IT maturity assessments, gap assessments and control mapping, including remediation roadmaps.
• Assist ISO 27001 programs, including ISMS scoping, risk assessment and audit readiness.
• Support PCI DSS assessments and evidence preparation.
• Contribute to HIPAA / HITRUST and regulated-data compliance projects in healthcare and life sciences.
• Draft policies, standards, governance frameworks and senior management reports.
• Collaborate with IT, security, compliance and business stakeholders to deliver audit-ready documentation.

Skills

Analytical skills

Regulatory interpretation

Communication skills

Documentation

Cross-framework work

Education

University degree in IT / CS / Cybersecurity

Job description

EY GDS Poland is seeking an IT Risk & Compliance Consultant in Digital Risk to join a high-performing international team delivering IT regulatory compliance, cybersecurity maturity and IT control framework services to global clients.

You will translate regulatory requirements into practical controls and support design, assessment and enhancement of compliance across ISO 27001, NIST CSF, PCI DSS, GDPR, COBIT and ITIL, collaborating across IT, security and business stakeholders.