Senior ICT Risk and DORA Compliance Lead

XTB Limited; Warszawa; Hybrid; PLN 100,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Great Place to Work

Professional development

Job summary

XTB Limited is seeking an experienced ICT risk and compliance professional to monitor DORA regulatory requirements and lead independent ICT assessments. You will identify ICT risks, develop recommendations, and work within a hybrid office/remote setup with cybersecurity and risk experts.

Join a fast-growing financial technology group in a collaborative environment, with opportunities for professional development and exposure to complex regulatory topics.

Qualifications

• Experience in IT audit, information security, or cybersecurity.
• Practical knowledge of the DORA Regulation and readiness to apply it in day-to-day work.
• Understanding of ICT risk and regulatory requirements and standards (ISO 27001/27002, ISO 31000).

Responsibilities

• Monitor compliance with the DORA Regulation.
• Conduct independent ICT assessments and controls within the Second Line of Defence (2LoD).
• Prepare post-audit reports.
• Identify ICT risks and assess their criticality for resilience and regulatory requirements.
• Develop recommendations and action points to reduce risks and support compliance with internal policies and external regulations.
• Monitor the implementation of recommendations and remediation actions.

Skills

IT audit

Information security

Cybersecurity

DORA Regulation

ICT risk

Risk management

Analytical thinking

Education

ISO 27001

ISO 27002

ISO 31000

DORA knowledge

Job description

XTB Limited is seeking an experienced ICT risk and compliance professional to monitor DORA regulatory requirements and lead independent ICT assessments. You will identify ICT risks, develop recommendations, and work within a hybrid office/remote setup with cybersecurity and risk experts.

Join a fast-growing financial technology group in a collaborative environment, with opportunities for professional development and exposure to complex regulatory topics.