Remote IT Risk & Compliance Consultant

EY; Katowice; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

EY GDS Poland is seeking an IT Risk & Compliance Consultant to join an international team delivering IT regulatory compliance and cybersecurity maturity services to global clients. The role is based in Katowice with 2 days in the office and 3 days remote.

You will translate regulatory requirements into practical IT controls, supporting organizations across ISO 27001, NIST CSF, PCI DSS, HIPAA, GDPR, COBIT and ITIL, while contributing to audit-ready documentation and governance processes.

Qualifications

• 3–5 years of IT risk, cybersecurity, or compliance experience.
• University degree in Information Technology, Computer Science, Cybersecurity or related field.
• English working proficiency (B2+).
• Working proficiency in at least one additional language: French, German, Spanish, Dutch or Italian.

Responsibilities

• Support design and review of IT regulatory and compliance frameworks across ISO 27001, NIST CSF, PCI DSS, HIPAA, HITRUST, GDPR, COBIT, ITIL.
• Perform cyber/IT maturity assessments, gap assessments and control mapping with remediation roadmaps.
• Assist with ISO 27001 programs including ISMS scoping, risk assessment and audit readiness.
• Support PCI DSS assessments including cardholder data environment reviews and evidence preparation.
• Draft policies, standards, governance frameworks, RACI models and senior management reports.

Skills

Analytical skills

Regulatory interpretation

Communication skills

Documentation & reporting

Cross-framework experience

Education

University degree in IT/CS/Cybersecurity

Tools

ISO 27001

NIST CSF

PCI DSS

Job description

EY GDS Poland is seeking an IT Risk & Compliance Consultant to join an international team delivering IT regulatory compliance and cybersecurity maturity services to global clients. The role is based in Katowice with 2 days in the office and 3 days remote.

You will translate regulatory requirements into practical IT controls, supporting organizations across ISO 27001, NIST CSF, PCI DSS, HIPAA, GDPR, COBIT and ITIL, while contributing to audit-ready documentation and governance processes.