ICT Risk Manager - Fintech & Regulatory Readiness

ZEN.COM; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private medical healthcare

Flexible working conditions

Competitive salary

Training opportunities

Influence on Zen.COM

Job summary

ZEN.COM is seeking an ICT Risk Expert to lead the identification, assessment, monitoring, and management of ICT and technology-related risks across our fintech organization. The role emphasizes structured risk management, risk ownership, and governance, with collaboration across Cyber Security, IT, Engineering, Operations, and Compliance teams.

The successful candidate will develop and maintain risk frameworks, drive mitigation plans, and ensure regulatory alignment, including DORA where

Qualifications

• Experience in ICT risk management, technology risk, operational risk, information security risk, or related field.
• Experience in fintech, banking, payments, or regulated financial services environment.
• Strong understanding of IT infrastructure, cloud services, applications, technology operations, and information security principles.
• Practical experience conducting ICT risk assessments and translating technical issues into business risk statements.
• Experience maintaining risk registers, assessing inherent and residual risk, defining mitigation plans, and monitoring remediation.
• Understanding of risk ownership, risk appetite, risk acceptance, escalation processes, and governance structures.
• Ability to challenge technical and business stakeholders constructively and ensure risks are managed.
• Familiarity with ICT risk management frameworks and standards (ISO 27001, ISO 31000, NIST CSF, COBIT).
• Familiarity with regulatory requirements, particularly DORA and ICT risk management provisions.
• Understanding of third-party ICT risk, business continuity, disaster recovery, and operational resilience.
• Ability to work independently in a dynamic fintech environment.
• Professional proficiency in English.
• Optional: Gallup test or similar assessment results.

Responsibilities

• ICT Risk Management Framework: Develop, maintain, and improve the ICT risk management framework, methodologies, procedures, and assessment criteria.
• Risk Identification and Assessment: Identify and assess risks related to IT infrastructure, applications, cloud services, information security, technology operations, and third-party dependencies.
• Risk Register Management: Maintain the ICT risk register with clear descriptions, owners, assessments, mitigation plans, and review dates.
• Risk Mitigation and Treatment: Define mitigation measures, track remediation, challenge timelines, and escalate overdue actions.
• Risk Appetite and Reporting: Define ICT risk indicators, thresholds, KRIs, and produce risk reports for management.
• Risk Acceptance: Coordinate risk acceptance with documented residual risks and approvals.
• Change and Project Risk Assessments: Assess ICT risks for changes, new products, implementations, migrations, and architectural decisions.
• Third-Party and Outsourcing Risk: Monitor ICT provider risks, cloud providers, suppliers, and outsourced services.
• ICT Resilience and Continuity: Assess risks related to business continuity, disaster recovery, system availability, and dependencies.
• Incident and Problem Risk Analysis: Assess risk implications of major incidents and track mitigation actions.
• Regulatory Alignment: Ensure ICT risk management aligns with regulatory requirements including DORA.
• Stakeholder Collaboration: Facilitate discussions between technical teams and business risk functions.
• Continuous Improvement: Identify gaps and improve risk assessments and reporting.

Skills

ICT risk management

Regulatory knowledge

Risk assessment

Stakeholder management

Information security

ISO 27001

NIST CSF

COBIT

DORA

Cloud risk

Third-party risk

Job description

ZEN.COM is seeking an ICT Risk Expert to lead the identification, assessment, monitoring, and management of ICT and technology-related risks across our fintech organization. The role emphasizes structured risk management, risk ownership, and governance, with collaboration across Cyber Security, IT, Engineering, Operations, and Compliance teams.

The successful candidate will develop and maintain risk frameworks, drive mitigation plans, and ensure regulatory alignment, including DORA where