IT Risk & Security Engineer (RedHat)

ING Group; Katowice; On-site; PLN 180,000 - 240,000; Full time

Job summary

A leading financial institution in Poland is looking for an Engineer II to join their team. This role involves managing IT Risk and compliance processes, ensuring application security, and collaborating with international teams. The ideal candidate will have a strong knowledge of Linux, experience in IT Risk Management, and fluency in English. You'll benefit from working in a dynamic Agile environment with a focus on continuous improvement and learning.

Qualifications

• Working knowledge of Linux.
• Experience in IT Risk Management and compliance processes.
• Ability to translate IT security requirements into practical implementation.
• Experience with CI/CD tools.
• General knowledge of networks, scripting, vulnerability remediation, and monitoring setup.
• Fluency in English, both verbal and written.
• Ability to collaborate effectively in an international team.

Responsibilities

• Manage compliance and risk management tasks.
• Collect and register IT Risk-related evidence for audits.
• Prepare and maintain risk-related documentation.
• Ensure application and system security.
• Participate in Scrum events and contribute to continuous improvement.

Skills

Linux

IT Risk Management

CI/CD tools

Fluent English

Networking knowledge

Scripting

Vulnerability remediation

Monitoring setup

Tools

Oracle DB

Azure DevOps

SAS 9.4

Ansible

Job description

ING Hubs Poland is hiring!

We are looking for you if you:

• have working knowledge of Linux,
• have experience in IT Risk Management and compliance processes,
• can translate IT security requirements into practical implementation,
• have experience with CI/CD tools,
• possess general knowledge of networks, scripting, vulnerability remediation, and monitoring setup,
• communicate fluently in English, both verbally and in writing,
• are a team player who collaborates effectively in an international environment.

You'll get extra points for:

• experience with Oracle DB,
• experience with Azure DevOps,
• experience with SAS 9.4,
• knowledge and experience in Agile frameworks (e.g., Scrum).

Your future responsibilities:

• compliance & risk management,
• collect and register IT Risk-related evidence and ensure timely updates in ITRMP (our platform used to demonstrate compliance with IT Risk Minimum Standards),
• collaborate during internal and external audits by providing required evidence and documentation,
• prepare and maintain risk-related documentation, including Risk Acceptance and MIA reports,
• technical Security & System Management,
• ensure application and system security by: applying security patches to hosts, remediating deviations from security baselines, addressing findings from penetration tests, perform OS and application management tasks, participate in Scrum events and contribute to continuous improvement.

Information about the squad:

Our mission is to provide a stable, secure, and automated platform for analytical purposes such as model development, monitoring, and reporting.

Our platform is already used by multiple ING entities worldwide.

Current technology stack: RHEL, SAS 9.4, Ansible, Oracle, Object Storage, Prometheus, and Azure DevOps-based pipelines.

We value motivation, adaptability, and eagerness to learn in a dynamic, international Agile environment.

The role naming convention in the global ING job architecture will be “Engineer II”.