IT Risk & Compliance Engineer – DevOps, Agile

Jobtailor; Katowice; On-site; PLN 180,000 - 270,000; Full time

Job summary

Jobtailor is seeking a proactive IT risk and compliance professional to oversee risk controls, coordinate SOX/ITGC audits, and partner with engineering and risk stakeholders. You will translate complex technical topics into clear documentation and dashboards.

In a fast-paced Agile environment, you will monitor risk indicators, drive automation of controls, and ensure adherence to SOX, ITGC, and DORA frameworks across systems and processes.

Qualifications

• Experience in IT Risk, IT Security, IT Compliance, IT Controls, or IT Audit.
• Strong understanding of risk frameworks and regulatory requirements.
• Experience working with IT, Engineering, and Risk stakeholders.
• Certifications (nice to have): ISC2 Cyber Security, Project Management (PMP), White/Blue Security Champion.

Responsibilities

• Coordinate IT risk control execution and act as SPOC for audits and evidence submission.
• Monitor control performance, risk indicators, and execution timelines.
• Identify, assess, and manage IT risks across systems and processes.
• Ensure compliance with internal frameworks and regulations (e.g. SOX, ITGC, DORA).
• Support audits (SOX/ITGC) and coordinate evidence collection with stakeholders.
• Drive automation of manual controls and improve efficiency of risk processes.
• Collaborate with DevOps, engineering, and business teams to embed risk and security controls.
• Translate technical topics into clear risk and control documentation.
• Develop dashboards and reports to provide visibility on risk and control performance.
• Work in Agile/SCRUM environments and support multiple workstreams.

Skills

IT Risk Management

IT Compliance

SOX Compliance

Agile/SCRUM Experience

Risk Frameworks

Analytical Skills

Communication Skills

Influencing Skills

Prioritization Skills

Education

ISC2 Cyber Security

Project Management (PMP)

White/Blue Security Champion

Tools

DevOps

Agile Methodologies

Job description

• Coordinate IT risk control execution and act as SPOC for audits and evidence submission
• Monitor control performance, risk indicators, and execution timelines
• Identify, assess, and manage IT risks across systems and processes
• Ensure compliance with internal frameworks and regulations (e.g. SOX, ITGC, DORA)
• Support audits (SOX/ITGC) and coordinate evidence collection with stakeholders
• Drive automation of manual controls and improve efficiency of risk processes
• Collaborate with DevOps, engineering, and business teams to embed risk and security controls
• Translate technical topics into clear risk and control documentation
• Develop dashboards and reports to provide visibility on risk and control performance
• Work in Agile/SCRUM environments and support multiple workstreams

Requirements

• Experience in IT Risk, IT Security, IT Compliance, IT Controls, or IT Audit
• Strong understanding of risk frameworks and regulatory requirements
• Experience working with IT, Engineering, and Risk stakeholders
• Strong analytical and communication skills, with ability to challenge and influence
• Experience in Agile/DevOps environments
• Ability to manage multiple priorities
• English at minimum B2 level
• Certifications (nice to have): ISC2 Cyber Security, Project Management (PMP), White/Blue Security Champion (ING certifications)

Core Competencies

Demonstrates expertise in IT Risk Management, IT Compliance, and IT Audit, with a strong focus on regulatory frameworks such as SOX and ITGC. Proficient in collaborating with cross-functional teams to enhance risk control processes and drive automation in Agile/SCRUM environments.

Highest-signal resume keywords

• IT Risk Management
• IT Compliance
• SOX Compliance
• Agile/SCRUM Experience
• Risk Frameworks

ATS Optimization Keywords

Hard Skills

• IT Risk
• IT Security
• IT Controls
• IT Audit
• Risk Assessment
• Control Performance Monitoring
• Automation of Controls
• Dashboard Development
• Risk Documentation
• Regulatory Compliance

Soft Skills

• Analytical Skills
• Communication Skills
• Influencing Skills
• Prioritization Skills

Certifications & Qualifications

• ISC2 Cyber Security
• Project Management (PMP)
• White/Blue Security Champion

Industry Keywords

• SOX
• ITGC
• DORA
• Risk Indicators
• Stakeholder Collaboration

Tools & Technologies

• DevOps
• Agile Methodologies