IT Risk & Controls Specialist — Cybersecurity & Advisory

Luxoft; Polska; Sur place; PLN 140 000 - 200 000; Plein temps

Résumé du poste

Luxoft is seeking an IT Risk and Controls Expert to strengthen cybersecurity programs by evaluating controls and guiding risk-based decisions. You will assess IS risks, perform security reviews, and advise stakeholders on control improvements in a regulated financial services setting.

The role emphasizes communication with technical and non-technical audiences, project coordination, and cloud security awareness to drive risk remediation and policy alignment.

Qualifications

• Experience in Information Security (IS), Cybersecurity, IT Risk Management, or related field.
• Experience in financial services, investment banking, or other regulated environments.
• Familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or COBIT.
• Strong understanding of information security principles, risk management methodologies, and control frameworks.
• Experience providing security advisory and consulting to technical and non-technical stakeholders.

Responsabilités

• Identify, assess, and mitigate information security risks across the organization.
• Conduct security assessments of internal projects and third-party providers.
• Provide security advisory services and guidance on controls, risk treatment, and policies.
• Coordinate and manage security-related projects to align with cybersecurity objectives.
• Lead third-party risk discussions and communicate remediation actions and business impacts.

Connaissances

Information Security

Cybersecurity

IT Risk Management

Financial Services Experience

NIST CSF

ISO 27001

CIS Controls

COBIT

Security Advisory

Risk Remediation

Stakeholder Communication

Cloud Security

Third-Party Risk

Analytical Thinking

Description du poste

Luxoft is seeking an IT Risk and Controls Expert to strengthen cybersecurity programs by evaluating controls and guiding risk-based decisions. You will assess IS risks, perform security reviews, and advise stakeholders on control improvements in a regulated financial services setting.

The role emphasizes communication with technical and non-technical audiences, project coordination, and cloud security awareness to drive risk remediation and policy alignment.