IT Risk & Compliance Engineer (DevOps/Agile)

ING Hubs Poland; Katowice; Hybrid; PLN 107,000 - 134,000; Full time

Benefits offered by this job

Hybrid work mode

Certifications (nice to have)

Job summary

ING Hubs Poland is seeking an IT Risk & Compliance Engineer (DevOps/Agile) to serve as a central point for IT control execution, audit coordination, and compliance governance.

You will collaborate with DevOps squads, asset owners, and risk stakeholders to ensure strong control health, accurate evidence management, and alignment with SOX, ITGC, and internal frameworks across the technology landscape.

Qualifications

• Experience in IT Risk, IT Security, IT Compliance, IT Controls, or IT Audit.
• Strong understanding of risk frameworks and regulatory requirements.
• Experience working with IT, Engineering, and Risk stakeholders.
• English at minimum B2 level.

Responsibilities

• Coordinate IT risk control execution and act as SPOC for audits and evidence submission.
• Monitor control performance, risk indicators, and execution timelines; escalate delays when needed.
• Identify, assess, and manage IT risks across systems and processes.
• Ensure compliance with internal frameworks and regulations (SOX, ITGC, DORA).
• Support audits (SOX/ITGC) and coordinate evidence collection with stakeholders.
• Drive automation of manual controls and improve efficiency of risk processes.
• Collaborate with DevOps, engineering, and business teams to embed risk and security controls.
• Translate technical topics into clear risk and control documentation.
• Develop dashboards and reports to provide visibility on risk and control performance.
• Work in Agile/SCRUM environments and support multiple workstreams.

Skills

IT Risk

IT Security

IT Compliance

IT Audit

DevOps

Agile

Regulatory knowledge

Stakeholder management

English (B2)

Job description

ING Hubs Poland is hiring!

The expected salary for this position:

9 600 - 12000 PLN

The financial ranges specified in the announcement are adjusted and may differ from the range specified in the remuneration regulations.

We work in a hybrid mode

• Experience in IT Risk, IT Security, IT Compliance, IT Controls, or IT Audit
• Strong understanding of risk frameworks and regulatory requirements
• Experience working with IT, Engineering, and Risk stakeholders
• Strong analytical and communication skills, with ability to challenge and influence
• Experience in Agile/DevOps environments
• Ability to manage multiple priorities
• English at minimum B2 level

We Are Looking For You, If You Have

• Experience in IT Risk, IT Security, IT Compliance, IT Controls, or IT Audit
• Strong understanding of risk frameworks and regulatory requirements
• Experience working with IT, Engineering, and Risk stakeholders
• Strong analytical and communication skills, with ability to challenge and influence
• Experience in Agile/DevOps environments
• Ability to manage multiple priorities
• English at minimum B2 level

English level – B2/C1

You'll Get Extra Points For

• Experience in audit, control testing, or compliance validation
• Familiarity with cloud, infrastructure, or DevOps practices
• Experience with automation, scripting, or risk tooling
• Experience in financial services

Certifications (nice To Have)

• ISC2 Cyber Security
• Project Management (PMP)
• White/Blue Security Champion (ING certifications)

Your Responsibilities

• Coordinate IT risk control execution and act as SPOC for audits and evidence submission
• Monitor control performance, risk indicators, and execution timelines; escalate delays when needed
• Identify, assess, and manage IT risks across systems and processes
• Ensure compliance with internal frameworks and regulations (e.g. SOX, ITGC, DORA)
• Support audits (SOX/ITGC) and coordinate evidence collection with stakeholders
• Drive automation of manual controls and improve efficiency of risk processes
• Collaborate with DevOps, engineering, and business teams to embed risk and security controls
• Translate technical topics into clear risk and control documentation
• Develop dashboards and reports to provide visibility on risk and control performance
• Work in Agile/SCRUM environments and support multiple workstreams

Information About The Squad

We are seeking highly motivated IT Risk & Compliance Engineer (DevOps/Agile) to serve as a central point of contact for IT control execution, audit coordination, and compliance governance across a dynamic, Agile-driven technology landscape. In this role, you will collaborate closely with DevOps squads, IT custodians, asset owners, and risk stakeholders to ensure strong operational control health, accurate evidence management, and continuous alignment with SOX, ITGC, and internal risk frameworks for Paradigm Shift IT risk and DevOps Business as usual. You will thrive in an environment where proactive leadership, cross-functional communication, and a balance between structure and agility are vital. This role is essential in strengthening IT governance and supporting secure, compliant technology delivery. The role naming convention in the global ING job architecture will be: Engineer II (ING Global Job Architecture)