Senior ICT Security & Regulatory Risk Partner

Provident Polska; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Stable employment

Polish market experience

Job summary

Provident Polska is seeking an experienced ICT regulatory compliance lead to act as the Group technical authority on regulatory standards such as DORA, GDPR, PSD2 and EBA guidelines. You will oversee ISMS alignment with laws and contractual obligations, perform assessments, and report KPIs/KRIs at group and local levels.

The role requires engaging with senior management, regulators and auditors, and providing guidance on ICT risk and remediation plans. Strong English communication is essential.

Qualifications

• Proven experience in ICT security, technology risk and regulatory compliance within financial services.
• Strong knowledge of DORA, GDPR, PSD2, EBA guidelines and ICT risk frameworks.
• Hands on experience with ISMS design, implementation or oversight.
• Ability to interpret regulatory requirements and translate them into practical controls.
• Experience engaging with senior management, regulators and auditors.
• Very good spoken and written English (additional languages an advantage).

Responsibilities

• Act as a Group technical authority for ICT regulatory compliance (e.g. DORA, GDPR, PSD2, EBA guidelines).
• Ensure ongoing alignment of the ISMS with legal, regulatory and contractual obligations.
• Perform ICT compliance assessments, control effectiveness reviews and maturity evaluations.
• Identify compliance gaps and prioritise remediation actions in cooperation with IT, Risk and Security SMEs.
• Define, monitor and report compliance KPIs and KRIs at Group and local level.
• Act as Security Business Partner for the local market (Poland) and single point of contact for Information Security.
• Advise senior management on ICT and third party risk, control deficiencies and remediation plans.
• Provide senior oversight of major ICT and cyber incidents, including escalation, regulatory notification and post incident reviews.
• Lead interaction with local regulators and supervisory authorities on security related matters.
• Promote a strong cybersecurity and risk aware culture within the local organisation.

Skills

ICT security

Technology risk

Regulatory compliance

ISMS design & oversight

Tools

ISMS

Job description

Provident Polska is seeking an experienced ICT regulatory compliance lead to act as the Group technical authority on regulatory standards such as DORA, GDPR, PSD2 and EBA guidelines. You will oversee ISMS alignment with laws and contractual obligations, perform assessments, and report KPIs/KRIs at group and local levels.

The role requires engaging with senior management, regulators and auditors, and providing guidance on ICT risk and remediation plans. Strong English communication is essential.