Senior GRC Analyst: FinTech Security & Compliance Architect

OANDA Poland sp. z o.o.; Kraków; On-site; PLN 180,000 - 270,000; Part time

Job summary

OANDA Poland sp. z o.o. is seeking a senior information security professional to govern the security program and ensure compliance with major frameworks. You will quantify cyber risks, map controls to GDPR and DORA, and support auditing processes.

Responsibilities include creating training materials, coordinating with auditors, and advancing GRC automation within a global fintech context. Strong communication and policy-writing skills are essential.

Qualifications

• 5 to 10 years of hands-on information security experience.
• Strong working knowledge of major security frameworks and standards (SOC2, ISO27001, NIST, PCI-DSS).
• Deep understanding of data protection and regulatory requirements (GDPR, DORA).
• Experience performing risk assessments, writing security policies, and managing compliance.
• Excellent communication to lead security meetings and report to senior management.

Responsibilities

• Own the Information Security Program governance and ensure alignment with key frameworks.
• Quantify and track cyber risks and integrate them into the Enterprise Risk Management framework.
• Map security program against GDPR, DORA, and global Banking Authority guidelines where FTMO Group operates.
• Create and deliver training materials to defend against threats.
• Act as the primary contact for internal and external auditors and lead remediation of gaps.
• Streamline and automate GRC processes by implementing and supporting modern GRC tools.

Skills

Information security governance

Security frameworks (SOC2, ISO27001, N

Tools

GRC tools

Job description

OANDA Poland sp. z o.o. is seeking a senior information security professional to govern the security program and ensure compliance with major frameworks. You will quantify cyber risks, map controls to GDPR and DORA, and support auditing processes.

Responsibilities include creating training materials, coordinating with auditors, and advancing GRC automation within a global fintech context. Strong communication and policy-writing skills are essential.