IT Audit & Risk Officer

ING Group; Katowice; On-site; PLN 180,000 - 240,000; Full time

Job summary

A leading financial services organization in Katowice is hiring an Engineer III focused on IT Risk Management. The successful candidate will manage compliance and risks related to IT systems, report to senior management, and support IT audits. Applicants should have a strong background in information security, risk management, and possess relevant certifications. Fluent English and analytical skills are essential for this role.

Qualifications

• Knowledge in information security, risk management, or compliance areas.
• B2 English level fluency, both in speaking and writing.
• Experience in performing security/compliance checks or auditing.

Responsibilities

• Identifying and analyzing risks related to IT systems.
• Support the development of IT risk management policies.
• Monitor compliance with legal and regulatory requirements.

Skills

Information Security Knowledge

Risk Management

Compliance Knowledge

Strong Analytics Skills

Excellent Communication Skills

Tools

CISSP Certification

CISA Certification

CompTIA Security+

ISO 27000 Certification

Job description

Overview

ING Hubs Poland is hiring!

We are looking for you, if you:

• have knowledge in information security, risk management or compliance areas,
• have excellent communication skills to clearly and succinctly express ideas, facts and opinions fluently both in speaking and writing,
• have strong analytics skills to identify problems, analyze key information and make connections, to find appropriate solutions,
• are oriented on result and delivery to complete tasks and achieve goals in an efficient, timely and high-quality manner.

English level: B2

You\'ll get extra points for:

• experience in performing security/compliance checks or auditing either internal or external parties,
• relevant IT security certificates (CISSP, CISA, CRISC, CompTIA Security+, ISO 27000),
• product/technology certifications (especially cloud solutions, but also operating systems, databases),
• experience of working in an international environment.

Responsibilities

• Identifying, analyzing, and assessing of risks related to IT systems, infrastructure, and business processes.
• Support the development and implementation of IT risk management policies, procedures and standards.
• Perform internal compliancy checks and support in IT audits preparations.
• Monitor compliance with internal and external, legal and regulatory requirements (e.g., GDPR, DORA, NIS2) and industry standards (ISO 27001, COBIT, ITIL).
• Report risks and remediation actions to senior management.
• Support Asset Owners in effective IT Risk Management and technical compliance.

About the squad

The team is 1st Line of Defense responsible for internal implementation, development and monitoring of Information Technology Risk in Global CISO domain. It is focused on verification and assessment of security and IT risk management processes. Support Asset Owners in effective IT Risk Management and technical compliance. Additionally, it provides broad and comprehensive IT security consultations in the design, implementation and maintenance of IT systems.

Role naming

The role naming convention in the global ING job architecture will be “Engineer III”.