Senior IT Risk & Audit Compliance Analyst

DCG Poland; Łódź; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private medical care

Co-financing for the sports card

Constant consultant support

Job summary

DCG Poland is seeking a Senior IT Risk & Audit Compliance Analyst to lead IT risk assessments, audit remediations, and governance across cross-functional teams. You will handle evidence gathering, reporting to senior leadership and coordination of large-scale compliance initiatives.

Ideal candidates have senior expertise in DNS, network, cloud, and databases (Oracle, SQL Server, PostgreSQL) plus Power Platform skills (Power Apps, Power Automate).

Qualifications

• Experience in IT risk assessments, risk monitoring and risk management frameworks.
• Proven audit management, remediation planning and audit closure delivery.
• Familiarity with NIS2, DORA, FSA guidelines and ECB requirements.
• Experience on large cross-organizational risk, audit or compliance initiatives.
• Knowledge of banking apps, continuity and business impact analysis.
• Strong English communication, negotiation and stakeholder management.

Responsibilities

• Conduct IT risk assessments from identification to monitoring and action planning.
• Design and drive audit remediation plans and closure activities.
• Collect, document and present audit evidence and artefacts.
• Report progress, risks and outcomes to senior leadership.
• Coordinate remediation of cross-organizational audit issues.
• Develop project governance structures and stakeholder agreements.
• Design SharePoint lists, Power Apps and Power Automate flows.
• Support data management and analytics using Python.

Skills

IT risk assessments

Risk monitoring

Audit management

Stakeholder management

Python for data analytics

English proficiency

Project governance

Security concepts

Tools

SharePoint administration

Power Apps

Power Automate

Oracle / MSSQL / PostgreSQL

DNS / TCP/IP / cloud networking

Python

Job description

Senior IT Risk & Audit Compliance Analyst

Stanowisko: Senior IT Risk & Audit Compliance Analyst

Senior IT Risk & Audit Compliance Analyst

Responsibilities:

• Conduct IT risk assessments from risk identification through action planning and risk monitoring
• Design and drive audit remediation plans, strategies and audit closure activities
• Collect, document and present audit evidence and technical artefacts
• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions
• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues
• Establish project plans, governance structures and communication frameworks
• Onboard stakeholders and define working agreements to achieve project objectives
• Report weekly on project progress, impediments and identified risks
• Take proactive actions to ensure timely delivery of agreed outcomes
• Plan and coordinate people and resources against project timelines
• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows
• Support data management and analytics activities using Python

Requirements:

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks
• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives
• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets
• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management
• Senior to expert knowledge of vulnerability management, security testing and scanning tools
• Strong understanding of security threats, web-based threats and mitigation techniques
• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems
• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis
• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting
• Expert-level experience with SharePoint administration and development, Power Apps and Power Automate
• Mid to senior-level Python skills for data management and analytics
• Excellent organizational, communication and negotiation skills
• Ability to motivate stakeholders and manage expectations
• Proven ability to identify risks, control weaknesses and remediation actions
• Strong analytical skills with proactive problem-solving approach
• Very good command of English, both spoken and written

Nice to have:

• Familiarity with internal risk methods, tools and approaches
• Knowledge of security risk management and governance
• Experience coaching and upskilling junior audit and risk professionals
• Politically sensitive and persuasive communication style
• Trustworthy approach and ability to acknowledge and learn from incorrect decisions

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant