IT Analyst Senior

B2B Network; Warszawa; On-site; PLN 90,000 - 130,000; Full time

Job summary

B2B Network in Poland seeks an IT Risk, Audit and Compliance professional to lead risk assessments, design remediation plans and monitor control effectiveness across risk frameworks.

You will communicate risk and remediation plans to senior leadership, craft evidence-based artifacts, and drive audit closure with cross-functional teams in a complex, regulated environment.

Qualifications

• Expert knowledge designing audit remediation plans and strategies as well as collecting and documenting evidences and technical artefacts
• Audit closure delivery and negotiation
• Communicating risk and audit remediation plans to senior leadership and control functions
• Experience with risk methods, tools and approach

Responsibilities

• You will set up a project plan with all relevant communication and governance according to an industry standard project management approach
• You ensure to have onboarded stakeholders, setting working agreements and follow up to achieve the required results
• Report on a weekly basis about progress, impediments and perceived risks
• Taking proactively the needed actions to ensure the agreed result and to have the result in time
• Excellent organization skills, to plan the use of people and resources to meet deadlines, strong interpersonal skills, to motivate and lead “team members”
• The ability to monitor and control timelines, good communication and negotiation skills, and manage expectations

Skills

Risk frameworks

Audit management

Communicating risks

Cloud security

Network security

Database security

Security testing

Governance

Python

SharePoint

Tools

SharePoint

Job description

IT Risk & Audit and Compliance

IT risk assessments, from risk identification through to action plans and risk monitoring, expert knowledge of risk frameworks, familiarity with Bank's risk methods, tools and approach a plus

Audit management - expert knowledge designing audit remediation plans and strategies as well as collecting and documenting evidences and technical artefacts, audit closure delivery and negotiation

Communicating risk and audit remediation plans, priority, efforts, risks and outcome to senior leadership, risk and control functions

General and specific bank compliance requirements (NIS2, DORA, FSA guidelines, ECB requirements), experience working on large scale cross organizational issues, document experience with closure of ECB and GIA audit issues

IT Security

Network security - expert in dns, tcp/ip and network architecture including cloud

Database security - senior/expert with emphasis on backup strategies, user management and authentication, version and patch management

Security vulnerability management - senior/expert knowledge of security testing and scanning tools and techniques for vulnerability and patch management

Security threat management and web based threats and mitigation of such threats, security risk management and governance a plus

Infrastructure and operations - incident and problem management - working knowledge of service delivery including CMDB systems

Banking

Banking applications - knowledge of various banking areas (transaction, corporate, asset management/trading etc.) and underlying technology and applications

Experience with banking technologies in general, including business continuity, business impact analysis and business analysis

Project management

You will set up a project plan with all relevant communication and governance according to an industry standard project management approach

You ensure to have onboarded stakeholders, setting working agreements and follow up to achieve the required results

Report on a weekly basis about progress, impediments and perceived risks

Taking proactively the needed actions to ensure the agreed result and to have the result in time

Excellent organization skills, to plan the use of people and resources to meet deadlines, strong interpersonal skills, to motivate and lead “team members”

The ability to monitor and control timelines, good communication and negotiation skills, and manage expectations

Technical skills

Knowledge of databases technologies, including Oracle, DB2, MSSQL, PostgreSQL - architecture, security, compliance, user management - Senior

Knowledge of networks, knowledge of IP/DNS systems, network architecture in cloud and internet based asset - Expert

Sharepoint administration and development - design, development and maintenance of sharepoint lists, power apps and power automate flows - Expert

Python - mid-senior level of Python coding for data management and analytics

Soft skills

Political sensitive, Coaching and upskilling young audit/risk personnel, Persuasive, Trustworthy, Capable of being vulnerable (admit when a ‘wrong’ choice has been made), Proven ability to recognize and advise on the remediation of control ineffectiveness, Ability to identify risks and articulate process and control weaknesses, Analytical and from that proactively proposing alternatives when needed