ICT Risk & Resilience Lead

Scope Ratings; Poznań; On-site; PLN 220,000 - 320,000; Full time

Benefits offered by this job

Benefits package

Job summary

Scope Ratings seeks an ICT Risk Manager to run the ICT risk management framework day-to-day, including risk assessments, policy maintenance, resilience testing, and reporting. The role oversees information security, ICT business continuity and third-party risk, coordinating with business and technology functions.

The successful candidate will draft policies, oversee testing programs (including penetration testing and vulnerability management), and communicate risk insights to the Resilience

Qualifications

• 4+ years of experience in risk, security, or resilience discipline in financial services or regulated industry.
• Experience drafting policies, methodologies and process documentation.
• Practical experience in ICT risk assessment cycles and security testing oversight.
• Experience working with first-line business and technology functions on risk topics.
• Awareness of threat landscape in financial services and cyber developments.

Responsibilities

• Draft and maintain ICT risk management framework, policies and methodologies.
• Design processes for vendor assessment, change risk review, and risk reporting.
• Respond to client security questionnaires and maintain standard responses library.
• Run ICT risk assessment cycles and oversee security testing programs.
• Maintain cyber threat landscape through threat intelligence and ISAC participation.
• Consolidate findings into a single ICT findings view and track remediation.
• Write executive summaries for Resilience Committee and senior management.

Skills

Risk management

Information security

Resilience

Vendor risk management

English fluency

Policy drafting

Security testing oversight

Threat intelligence

Business continuity

Education

Experience in financial services or regulated industry

Tools

ISO 27001

NIST CSF

DORA

Job description

Scope Ratings seeks an ICT Risk Manager to run the ICT risk management framework day-to-day, including risk assessments, policy maintenance, resilience testing, and reporting. The role oversees information security, ICT business continuity and third-party risk, coordinating with business and technology functions.

The successful candidate will draft policies, oversee testing programs (including penetration testing and vulnerability management), and communicate risk insights to the Resilience