IT Analyst – IT Risk & Audit Compliance

ITConnect; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

ITConnect in Warsaw, Poland, is seeking an experienced IT risk and audit professional to lead risk assessments, design remediation plans, and coordinate governance across banking solutions. The role requires strong knowledge of security, compliance and incident management in a hybrid setup.

The candidate will interact with senior leadership, drive remediation actions, and ensure timely closure of issues, while maintaining governance documents and evidence portfolios.

Qualifications

• Experience with IT risk assessments and audit remediation processes.
• Knowledge of NIS2, DORA, ECB requirements and banking compliance.
• Strong communication with senior leadership and governance bodies.
• Proactive project planning and stakeholder onboarding with governance.

Responsibilities

• Execute IT risk assessments across systems, from identification to action plans and monitoring.
• Design and track audit remediation plans and evidence collection.
• Communicate risk and remediation priorities to senior leadership and control functions.
• Ensure compliance with NIS2, DORA, ECB guidelines and related banking requirements.
• Oversee network and database security, including backup, access, and patch management.
• Lead vulnerability management and threat monitoring, including testing and patching.
• Coordinate incident and problem management, and service delivery with CMDB awareness.
• Understand banking technologies across transactions, corporate actions and asset management.
• Support business continuity, BIAs and related analyses.

Skills

IT risk assessments

Audit management

Network security

Database security

Security vulnerability management

Security threat management

Incident and problem management

Banking applications knowledge

SharePoint administration

Python

Tools

SharePoint

Job description

Location in Poland: Warsaw, Gdansk, Gdynia, Lodz

Working model: Hybrid

• IT risk assessments, from risk identification through to action plans and risk monitoring, expert knowledge of risk frameworks, familiarity with Nordea risk methods, tools and approach a plus
• Audit management- expert knowledge designing audit remediation plans and strategies as well as collecting and documenting evidences and technical artefacts, audit closure delivery and negotiation
• Communicating risk and audit remediation plans, priority, efforts, risks and outcome to senior leadership, risk and control functions
• General and specific bank compliance requirements (NIS2, DORA, FSA guidelines, ECB requirements), experience working on large scale cross organizational issues, document experience with closure of ECB and GIA audit issues
• Network security- expert in dns, tcp/ip and network architecture including cloud
• Database security- senior/expert with emphasis on backup strategies, user management and authentication, version and patch management
• Security vulnerability management- senior/expert knowledge of security testing and scanning tools and techniques for vulnerability and patch management
• Security threat management and wen based threats and mitigation of such threats, security risk management and governance a plus
• Infrastructure and operations- incident and problem management- working knowledge of service delivery including CMDB systems
• Banking applications- knowledge of various banking areas 8transaction, corporate, asset management/trading etc.) and underlying technology and applications
• Experience with banking technologies in general, including business continuity, business impact analysis and business analysis
• You will set up a project plan with all relevant communication and governance according to an industry standard project management approach.
• You ensure to have onboarded stakeholders, setting working agreements and follow up to achieve the required results.
• Report of a weekly basis about progress, impediments and perceived risks
• Taking proactively the needed actions to ensure the agreed result and to have the result in time.
• Excellent organization skills, to plan the use of people and resources to meet deadlines. strong interpersonal skills, to motivate and lead “team members”
• The ability to monitor and control timelines, good communication and negotiation skills, and manage expectations
• Knowledge of databases technologies, including Oracle, DB2, MSSQL, Postgress- architecture, security, compliance, user management- Senior
• Knowledge of networks, knowledge of IP/DNS systems, network architecture in cloud and internet based asset- Expert
• SharePoint administration and development- design, development and maintenance of SharePoint lists, power apps and power automate flows- Expert
• Python- mid-senior level of Python coding for data management and analytics
• Political sensitive
• Gogether
• Coaching and upskilling young audit/risk personnel
• Trustworthy
• Capable of being vulnerable (admit when a ‘wrong’ choice has been made)
• Proven ability to recognize and advise on the remediation of control ineffectiveness
• Ability to identify risks and articulate process and control weaknesses
• Analytical and from that proactively proposing alternatives when needed

To oferujemy:

• The person need to follow the internals with office present from October 3 times a week