IT Risk & Security Engineer (RedHat)

ING Group; Katowice; On-site; PLN 180,000 - 240,000; Full time

Job summary

A leading banking technology company located in Katowice is seeking an Engineer II to manage IT risk and compliance. You will be responsible for ensuring application and system security and collaborating during audits. The ideal candidate has experience with Linux, IT Risk Management, and CI/CD tools, and is fluent in English. This dynamic role values motivation and adaptability in an Agile environment.

Qualifications

• Experience in IT Risk Management and compliance processes.
• Ability to translate IT security requirements into practical implementation.
• Experience with CI/CD tools.

Responsibilities

• Manage compliance & risk management processes.
• Collect and register IT Risk-related evidence.
• Collaborate during audits by providing evidence and documentation.
• Prepare and maintain risk-related documentation.
• Ensure application and system security.
• Participate in Scrum events and contribute to continuous improvement.

Skills

Linux

IT Risk Management

CI/CD tools

General knowledge of networks

Scripting

Vulnerability remediation

Monitoring setup

Fluent English

Team player

Tools

Oracle DB

Azure DevOps

SAS 9.4

Agile frameworks

Job description

ING Hubs Poland is hiring!

We are looking for you if you:

• have working knowledge of Linux,
• have experience in IT Risk Management and compliance processes,
• can translate IT security requirements into practical implementation,
• have experience with CI/CD tools,
• possess general knowledge of networks, scripting, vulnerability remediation, and monitoring setup,
• communicate fluently in English, both verbally and in writing,
• are a team player who collaborates effectively in an international environment.

You'll get extra points for:

• experience with Oracle DB,
• experience with Azure DevOps,
• experience with SAS 9.4,
• knowledge and experience in Agile frameworks (e.g., Scrum).

Your future responsibilities:

• compliance & risk management,
• collect and register IT Risk-related evidence and ensure timely updates in ITRMP (our platform used to demonstrate compliance with IT Risk Minimum Standards),
• collaborate during internal and external audits by providing required evidence and documentation,
• prepare and maintain risk-related documentation, including Risk Acceptance and MIA reports,
• technical Security & System Management,
• ensure application and system security by: applying security patches to hosts, remediating deviations from security baselines, addressing findings from penetration tests, perform OS and application management tasks, participate in Scrum events and contribute to continuous improvement.

Information about the squad:

Our mission is to provide a stable, secure, and automated platform for analytical purposes such as model development, monitoring, and reporting.

Our platform is already used by multiple ING entities worldwide.

Current technology stack: RHEL, SAS 9.4, Ansible, Oracle, Object Storage, Prometheus, and Azure DevOps-based pipelines.

We value motivation, adaptability, and eagerness to learn in a dynamic, international Agile environment.

The role naming convention in the global ING job architecture will be “Engineer II”.