Senior GRC Analyst: InfoSec Governance & Risk

OANDA; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

OANDA is seeking an experienced information security professional to own governance of the Information Security Program. You will ensure alignment with NIST CSF, ISO27001:2022, GDPR, DORA, and data protection requirements across FTMO Group operations.

You will work with internal audit, compliance teams, and regulators to provide evidence, respond to questionnaires, and drive remediation of gaps while championing security awareness and risk-based decision making across the business.

Qualifications

• 5 to 10 years of hands-on experience in information security.
• Strong knowledge of SOC2, ISO27001, NIST, PCI-DSS.
• Deep understanding of GDPR and DORA compliance.

Responsibilities

• Take ownership of governance of the Information Security Program.
• Quantify and track cyber risks within the Enterprise Risk Management framework.
• Map security program to GDPR, DORA, and regulatory requirements.
• Create and deliver security training to defend against threats.
• Act as point of contact for auditors and drive remediation of gaps.

Skills

Information security

Risk assessment

Policy development

Audit liaison

Stakeholder communication

Education

Bachelor's degree in a relevant field

Tools

GRC software

Job description

OANDA is seeking an experienced information security professional to own governance of the Information Security Program. You will ensure alignment with NIST CSF, ISO27001:2022, GDPR, DORA, and data protection requirements across FTMO Group operations.

You will work with internal audit, compliance teams, and regulators to provide evidence, respond to questionnaires, and drive remediation of gaps while championing security awareness and risk-based decision making across the business.