IT Risk Analyst

Euroclear; Polska; On-site; PLN 120,000 - 180,000; Full time

Job summary

Euroclear is seeking an IT Risk Analyst within Risk Management - Technology & Cyber Risk to identify, assess and monitor IT risks across the organization. You will ensure policies and controls are effectively implemented in line with internal standards and regulatory requirements.

The role involves evaluating risk management policies, reviewing IT architecture and incidents, and supporting audits. English communication and a Master’s degree are highly valued.

Qualifications

• 3+ years with IT risk management, IT audit, or similar area.
• Familiarity with IT risk management standards (e.g., COBIT, ISO 31000, NIST).
• Analytical and problem-solving skills; strong written and verbal English communication.
• Master's degree in Computer Science, Information Technology, Risk Management, or related field is a plus.

Responsibilities

• Participate in evaluating IT risk management policies, procedures and systems.
• Support review of IT architecture, designs, plans, controls, and standards for risk alignment.
• Identify IT risks and exposures, investigate incidents, and propose preventive procedures.
• Investigate IT risk incidents and recommend enhancements to improve risk posture.
• Assist in development and application of IT risk assessments and compliance audits.
• Support evaluation and testing of IT systems for risk impacts.
• Provide guidance within IT and to business users on IT risk management and asset protection.
• Maintain knowledge of IT risk standards and regulatory requirements.

Skills

Analytical thinking

Problem-solving

English communication

Attention to detail

Education

Master's degree in Computer Science or Information Technology or Risk Management

Job description

Division: Risk Management - Technology & Cyber Risk

Risk Management division forms part of Euroclear's second line (of defense) and its mission is to support Euroclear in achieving its goals and delivering its strategy through providing robust, independent oversight of risk-taking activities across the Group.

The IT Risk Analyst supports the Risk Management division by being involved in identifying, assessing, and monitoring IT risks across the organization. This role is responsible for ensuring that IT risk management policies, procedures, and controls are effectively implemented and maintained, in line with internal standards and regulatory requirements.

Key Responsibilities

• Participate in the evaluation, testing, and recommending IT risk management policies, procedures, and systems (hardware, firmware, software);
• Supporting the review of the IT architecture, designs, plans, controls, and standards to ensure alignment with risk management objectives;
• Participate in identification of IT risks and exposures, investigation of incidents causes, and proposing procedures to prevent recurrence;
• Participate in the investigation of IT risk incidents, and recommend enhancements to improve risk posture;
• Support the development and application of techniques for conducting IT risk assessments and compliance audits;
• Support the evaluation and testing of IT systems for potential risk impacts;
• Facilitate guidance and direction within IT and to business users regarding IT risk management and protection of information assets;
• Maintain up-to-date knowledge of relevant IT risk standards, frameworks, and regulatory requirements.

Required Qualifications

• At least 3+ years of experience containing relevant aspects with IT risk management, IT audit, or a similar area;
• Familiarity with IT risk management standards (e.g., COBIT, ISO 31000, NIST).
• Analytical and problem-solving skills;
• Good written and verbal communication skills in English
• Master's degree in Computer Science, Information Technology, Risk Management, or a related field (or equivalent experience) is a plus.

Soft Skills

• Attention to detail and a methodical approach to problem-solving;
• Ability to work collaboratively within a team and communicate effectively with both technical and non-technical stakeholders;
• Eagerness to learn and develop new skills in IT risk management;
• Ability to manage time and priorities effectively, especially when handling multiple tasks or deadlines. #LI-MA1