IT Risk and Control Specialist

Luxoft; Wrocław; On-site; PLN 120,000 - 160,000; Full time

Job summary

DXC Luxoft is seeking an IT Risk and Controls Expert to strengthen the organization’s cybersecurity programme. You will evaluate security controls, assess information security risks, and guide risk-based decision-making for continuous improvement.

Responsibilities include managing cybersecurity activities, conducting security assessments, and providing advisory services to stakeholders. Experience in financial services and regulated environments is essential, with strong cloud security knowledge.

Qualifications

• Demonstrated experience in Information Security, Cybersecurity, IT Risk Management, or related field.
• Experience in financial services, investment banking, or regulated environments.
• Familiarity with industry frameworks (NIST CSF, ISO 27001, CIS Controls, COBIT).
• Strong understanding of information security principles, risk management methodologies, and control frameworks.
• Experience providing security advisory and consulting to technical and non-technical stakeholders.
• Ability to drive risk remediation discussions and influence stakeholders.
• Proven experience in cybersecurity risk management, security assessments, and control reviews.
• Knowledge of cloud security concepts and cloud-related risk management.
• Experience assessing third-party providers and managing security risks.
• Ability to provide clear, risk-based security advice to all levels.
• Strong communication, analytical, and problem-solving capabilities.

Responsibilities

• Cybersecurity: Manage cybersecurity activities, including IS risk identification, assessment, and mitigation.
• Security Assessments: Evaluate control effectiveness and compliance for internal projects and third parties.
• Security Consulting: Advise stakeholders on controls, risk treatment options, and policy requirements.
• Project Management: Coordinate and deliver security-related projects and initiatives.
• Third-Party Risk Management: Lead risk discussions and remediation guidance with stakeholders.

Skills

Information Security

Cybersecurity

IT Risk Management

Financial Services

Regulated Environments

NIST CSF

ISO 27001

CIS Controls

COBIT

Security Advisory

Risk Remediation

Cloud Security

Vendor Risk

Stakeholder Influence

Communication

Analytical Thinking

Job description

DXC Luxoft is a global IT services and consulting company, part of DXC Technology, delivering cutting-edge digital and software solutions worldwide. We partner with leading financial institutions and global enterprises, helping them transform and scale through modern technology.

Join a global community of engineers and be part of building impactful, modern technology solutions!

Project Description:

Join one of our leading investment banking clients as an IT Risk and Controls Expert. You will play a pivotal role in strengthening the organization's cybersecurity programme by evaluating security controls, identifying and assessing information security (IS) risks, and providing expert guidance to support risk-based decision-making and continuous improvement.

Responsibilities:

• Cybersecurity: Manage cybersecurity-related activities, including the identification, assessment, and mitigation of information security (IS) risks.
• Security Assessments: Conduct security assessments of internal projects and third-party service providers to evaluate control effectiveness and compliance with security requirements.
• Security Consulting: Provide security advisory services to stakeholders, offering guidance on security controls, risk treatment options, and policy requirements in business-friendly language.
• Project Management: Coordinate and manage security-related projects and initiatives, ensuring timely delivery and alignment with cybersecurity objectives.
• Third-Party Risk Management: Drive discussions regarding identified risks, communicate potential business impacts, and provide guidance on appropriate remediation actions.

Mandatory Skills Description:

• Demonstrable experience in Information Security (IS), Cybersecurity, IT Risk Management, or a related field.
• Experience operating within financial services, investment banking, or other regulated environments.
• Familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or COBIT.
• Strong understanding of information security principles, risk management methodologies, and control frameworks.
• Experience providing security advisory and consulting services to technical and non-technical stakeholders.
• Ability to drive risk remediation discussions and influence stakeholders to achieve security objectives.
• Proven experience in cybersecurity risk management, security assessments, and control effectiveness reviews.
• Strong knowledge of cloud security concepts and cloud-related risk management practices.
• Experience assessing third-party service providers and managing associated security risks.
• Ability to provide clear, risk-based security advice and influence stakeholders at all organizational levels.
• Strong communication skills, with the ability to translate technical findings into actionable business recommendations.
• Excellent analytical and problem-solving capabilities, coupled with a practical approach to risk management.

Nice-to-Have Skills Description:

• Familiarity with ISO 27001, NIST CSF, CIS Controls, or similar security frameworks.
• Knowledge of AWS, Azure, or GCP security capabilities and cloud governance practices.
• Relevant certifications such as CISSP, CISM, CRISC, CCSK, or CCSP.