Senior IT Risk & Audit Compliance Analyst Oracle, DB2, MSSQL, Python, SharePoint Łódź, Warsaw, Gdańsk, Gdynia

Diverse CG Sp. z o.o. Sp.k.; Poland; Remote; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private medical care

Co-financing for the sports card

Dedicated consultant support

Job summary

Diverse CG Sp. z o.o. Sp.k. is seeking a Senior IT Risk & Audit Compliance Analyst to lead IT risk assessments, design remediation plans and ensure regulatory compliance across NIS2, DORA and ECB guidelines. The role emphasizes cross‑functional collaboration, governance and data-driven analytics.

The successful candidate will manage large-scale risk initiatives, coordinate audits, and leverage SharePoint, Power Apps, Power Automate and Python to streamline evidence collection and reporting.

Qualifications

• Experience in IT risk assessments, risk monitoring and risk management.
• Audit management, remediation planning and evidence collection.
• Knowledge of NIS2, DORA, FSA guidelines and ECB requirements.
• Experience on large-scale cross-organizational risk, audit or compliance initiatives.
• Strong knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL.
• Vulnerability management and security testing expertise.
• Understanding of security threats and mitigation techniques.
• Proven stakeholder management, governance and progress reporting.
• Excellent command of English (spoken and written).

Responsibilities

• Conduct IT risk assessments from identification to monitoring and action planning.
• Design and drive audit remediation plans and closure activities.
• Collect, document and present audit evidence and artefacts.
• Communicate risks, remediation plans and timelines to leadership.
• Support compliance with NIS2, DORA, FSA guidelines and ECB requirements.
• Coordinate remediation of large cross-organizational issues.
• Establish project plans, governance and communication frameworks.
• Onboard stakeholders and define working agreements to deliver objectives.
• Report weekly on progress, impediments and risks.
• Plan and coordinate people and resources against deadlines.
• Develop and maintain SharePoint lists, Power Apps and Power Automate flows.
• Support data management and analytics using Python.

Skills

IT risk assessment

Audit management

Compliance knowledge

Cross‑functional programs

Network security

Database technologies

Vulnerability management

Threat mitigation

ITIL / CMDB

Banking systems

Project governance

SharePoint / Power Platform

Python

Stakeholder management

Risk identification

Analytical thinking

English proficiency

Tools

SharePoint

Power Apps

Power Automate

Python

Oracle

DB2

MSSQL

PostgreSQL

DNS

TCP/IP

Job description

Senior IT Risk & Audit Compliance Analyst

Position: Senior IT Risk & Audit Compliance Analyst

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Senior IT Risk & Audit Compliance Analyst

Responsibilities:

• Conduct IT risk assessments from risk identification through action planning and risk monitoring
• Design and drive audit remediation plans, strategies and audit closure activities
• Collect, document and present audit evidence and technical artefacts
• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions
• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues
• Establish project plans, governance structures and communication frameworks
• Onboard stakeholders and define working agreements to achieve project objectives
• Report weekly on project progress, impediments and identified risks
• Take proactive actions to ensure timely delivery of agreed outcomes
• Plan and coordinate people and resources against project timelines
• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows
• Support data management and analytics activities using Python

Requirements:

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks
• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives
• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets
• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management
• Senior to expert knowledge of vulnerability management, security testing and scanning tools
• Strong understanding of security threats, web-based threats and mitigation techniques
• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems
• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis
• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting
• Expert-level experience with SharePoint administration and development, Power Apps and Power Automate
• Mid to senior-level Python skills for data management and analytics
• Excellent organizational, communication and negotiation skills
• Ability to motivate stakeholders and manage expectations
• Proven ability to identify risks, control weaknesses and remediation actions
• Strong analytical skills with proactive problem-solving approach
• Very good command of English, both spoken and written

Nice to have:

• Familiarity with internal risk methods, tools and approaches
• Knowledge of security risk management and governance
• Experience coaching and upskilling junior audit and risk professionals
• Politically sensitive and persuasive communication style
• Trustworthy approach and ability to acknowledge and learn from incorrect decisions

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant