IT Risk Analyst

Euroclear; Polska; Hybrid; PLN 120,000 - 190,000; Full time

Job summary

Euroclear is seeking an IT Risk Analyst within Risk Management - Technology & Cyber Risk. You will identify, assess and monitor IT risks across the organization, ensuring IT risk management policies and controls meet internal standards and regulatory requirements.

Requirements include 3+ years in IT risk management or IT audit, familiarity with COBIT, ISO 31000, and NIST, plus strong English communication. A Master's degree in Computer Science, Information Technology or Risk Management is a plus.

Qualifications

• At least 3+ years in IT risk management or IT audit.
• Familiarity with IT risk management standards (e.g., COBIT, ISO 31000, NIST).
• Analytical and problem-solving skills.
• Good written and verbal English communication.
• Master's degree in Computer Science, Information Technology, Risk Management, or related field is a plus.

Responsibilities

• Participate in evaluating, testing, and recommending IT risk management policies, procedures, and systems (hardware, firmware, software).
• Review IT architecture, designs, plans, controls, and standards to ensure alignment with risk management objectives.
• Identify IT risks and exposures, investigate incidents causes, and propose procedures to prevent recurrence.
• Investigate IT risk incidents and recommend enhancements to improve risk posture.
• Develop and apply techniques for IT risk assessments and compliance audits.
• Evaluate and test IT systems for potential risk impacts.
• Facilitate guidance within IT and to business users regarding IT risk management and protection of information assets.
• Maintain up-to-date knowledge of IT risk standards, frameworks, and regulatory requirements.

Skills

IT risk management

IT audit

COBIT

ISO 31000

NIST

English communication

Education

Master's degree in CS/IT/Risk

Job description

Division: Risk Management - Technology & Cyber Risk

Risk Management division forms part of Euroclear's second line (of defense) and its mission is to support Euroclear in achieving its goals and delivering its strategy through providing robust, independent oversight of risk-taking activities across the Group.

The IT Risk Analyst supports the Risk Management division by being involved in identifying, assessing, and monitoring IT risks across the organization. This role is responsible for ensuring that IT risk management policies, procedures, and controls are effectively implemented and maintained, in line with internal standards and regulatory requirements.

Key Responsibilities

• Participate in the evaluation, testing, and recommending IT risk management policies, procedures, and systems (hardware, firmware, software);
• Supporting the review of the IT architecture, designs, plans, controls, and standards to ensure alignment with risk management objectives;
• Participate in identification of IT risks and exposures, investigation of incidents causes, and proposing procedures to prevent recurrence;
• Participate in the investigation of IT risk incidents, and recommend enhancements to improve risk posture;
• Support the development and application of techniques for conducting IT risk assessments and compliance audits;
• Support the evaluation and testing of IT systems for potential risk impacts;
• Facilitate guidance and direction within IT and to business users regarding IT risk management and protection of information assets;
• Maintain up-to-date knowledge of relevant IT risk standards, frameworks, and regulatory requirements.

Required Qualifications

• At least 3+ years of experience containing relevant aspects with IT risk management, IT audit, or a similar area;
• Familiarity with IT risk management standards (e.g., COBIT, ISO 31000, NIST).
• Analytical and problem-solving skills;
• Good written and verbal communication skills in English
• Master's degree in Computer Science, Information Technology, Risk Management, or a related field (or equivalent experience) is a plus.

Soft Skills

• Attention to detail and a methodical approach to problem-solving;
• Ability to work collaboratively within a team and communicate effectively with both technical and non-technical stakeholders;
• Eagerness to learn and develop new skills in IT risk management;
• Ability to manage time and priorities effectively, especially when handling multiple tasks or deadlines.#LI-MA1