Senior GRC & Cyber Risk Lead for FinTech

OANDA Corporation; Kraków; On-site; PLN 180,000 - 230,000; Full time

Job summary

OANDA Corporation in Krakow is seeking a Senior GRC Analyst to drive governance and assurance of the Information Security Program. You will ensure alignment with NIST CSF and ISO27001:2022, and support risk measurement and reporting across the enterprise.

You will map GDPR and DORA, create engaging security training, liaise with auditors, and help automate GRC processes using modern tools to strengthen regulatory compliance.

Qualifications

• 5–10 years of hands-on experience in information security.
• Strong working knowledge of major security frameworks and standards (SOC2, ISO27001, NIST, PCI-DSS).
• Experience performing risk assessments and managing compliance.

Responsibilities

• Take ownership of the Information Security Program's governance and alignment with NIST CSF and ISO27001:2022.
• Quantify and track cyber risks, integrating them into the Enterprise Risk Management framework.
• Map security requirements to GDPR, DORA, and global regulatory guidelines.

Skills

NIST CSF & ISO27001 Knowledge

PCI-DSS Knowledge

Risk Assessments & Policy Writing

Communication with Stakeholders

Education

Bachelor's degree in Information Security

Tools

GRC Tools

Job description

OANDA Corporation in Krakow is seeking a Senior GRC Analyst to drive governance and assurance of the Information Security Program. You will ensure alignment with NIST CSF and ISO27001:2022, and support risk measurement and reporting across the enterprise.

You will map GDPR and DORA, create engaging security training, liaise with auditors, and help automate GRC processes using modern tools to strengthen regulatory compliance.