ICT Risk Expert - Fintech, Remote & Flexible

ZEN; Polska; Hybrid; PLN 120,000 - 170,000; Full time

Benefits offered by this job

Real influence on shaping ZEN.COM

Private medical healthcare

Training opportunities

Flexible working conditions

Job summary

ZEN.COM is a leading fintech platform seeking an ICT Risk Expert to identify, assess, and monitor technology risks within our regulated environment. The role will establish a structured risk management approach, document risk statements, and coordinate with Cyber Security, IT, Engineering, Operations and Compliance teams to implement effective mitigations.

You will maintain risk registers, KRIs, and governance reporting while ensuring regulatory alignment (DORA where applicable) and continuous

Qualifications

• Experience in ICT risk management and information security risk.
• Experience in fintech or regulated financial services.
• Ability to translate technical issues into business risk statements and manage risk ownership.

Responsibilities

• Develop and maintain ICT risk management framework and assessment criteria.
• Identify and assess risks related to IT infrastructure, cloud services, and third parties.
• Maintain ICT risk register with owners, mitigations, and review dates.
• Define mitigation actions, challenge timelines, and track remediation.
• Support regulatory alignment, including DORA compliance where applicable.
• Collaborate with Cyber Security, IT, Engineering, Operations and Compliance.

Skills

ICT risk management

Regulatory awareness

Stakeholder collaboration

English proficiency

Education

Bachelor's degree in IT/Risk Management or related field

Job description

ZEN.COM is a leading fintech platform seeking an ICT Risk Expert to identify, assess, and monitor technology risks within our regulated environment. The role will establish a structured risk management approach, document risk statements, and coordinate with Cyber Security, IT, Engineering, Operations and Compliance teams to implement effective mitigations.

You will maintain risk registers, KRIs, and governance reporting while ensuring regulatory alignment (DORA where applicable) and continuous