ICT Controls & DORA Specialist (2LoD)

XTB online investing; Warszawa; On-site; PLN 80,000 - 100,000; Full time

Benefits offered by this job

Stable employment

Professional development opportunities

Attractive compensation package

Job summary

XTB online investing is seeking a professional for an ICT compliance role in Warsaw, Poland. Candidates should possess experience in IT audit, information security, or cybersecurity, alongside practical knowledge of the DORA Regulation.

The position focuses on monitoring compliance, conducting assessments, and identifying ICT risks within a regulated financial environment. XTB offers a stable employment opportunity with professional development and an attractive compensation package.

Qualifications

• Experience in IT audit, information security, or cybersecurity.
• Practical knowledge of the DORA Regulation.
• Experience in ICT compliance.

Responsibilities

• Monitor compliance with the DORA Regulation.
• Conduct independent ICT assessments within the Second Line of Defence.
• Identify ICT risks and assess their criticality.

Skills

IT audit

Information security

Cybersecurity

DORA Regulation knowledge

Risk management standards

Job description

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certified Great Place to Work company.

Responsibilities

• Monitoring compliance with the DORA Regulation (Digital Operational Resilience Act)
• Conducting independent ICT assessments and controls within the Second Line of Defence (2LoD), with a focus on information security, cybersecurity, and IT infrastructure/systems management
• Identifying ICT risks and assessing their criticality from the perspective of operational resilience and regulatory requirements
• Developing recommendations and action points that reduce technological and process risks and support compliance with internal policies and external regulations/supervisory guidelines
• Monitoring the implementation of recommendations and remediation actions

Requirements

• Experience in one of the following areas: IT audit, information security, or cybersecurity
• Practical knowledge of the DORA Regulation and readiness to apply it in day‑to‑day work
• Experience in ICT compliance
• Understanding of information security principles, including knowledge of ISO/IEC 27001 and ISO/IEC 27002
• Knowledge of regulatory and supervisory requirements and standards related to risk management, including ISO 31000
• Ability to analyse complex issues and formulate clear, precise conclusions and recommendations

What we offer

• Stable employment in a regulated, fast‑growing financial/fintech environment
• Opportunity to work directly with DORA, ICT risk, and operational resilience frameworks
• Professional development through training, certifications, and exposure to complex ICT risk topics
• Real impact on the organisation’s security posture and regulatory compliance
• Collaborative environment with experts in cybersecurity, ICT risk, and compliance
• Attractive compensation package, including benefits aligned with company policy
• Modern office location with convenient access (e.g., near metro/transport hubs, if relevant)