Senior IT Risk & Audit Compliance Analyst Oracle, DB2, MSSQL, Python, SharePoint Łódź, Warsaw, Gdańsk, Gdynia

DCG Poland; Poland; Remote; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private medical care

Sports card reimbursement support

Dedicated consultant support

Job summary

DCG Poland is seeking a Senior IT Risk & Audit Compliance Analyst to lead IT risk assessments, design remediation plans and manage cross‑organizational audit activities. The role includes developing evidence, communicating with leadership, and ensuring compliance with NIS2, DORA and ECB guidelines.

The candidate will drive governance structures, onboard stakeholders, and coordinate resources while reporting progress and risks weekly. Strong English is required.

Qualifications

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks.
• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations.
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements.
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives.
• Very good command of English, both spoken and written.

Responsibilities

• Conduct IT risk assessments from risk identification through action planning and risk monitoring
• Design and drive audit remediation plans, strategies and audit closure activities
• Collect, document and present audit evidence and technical artefacts
• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions
• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues
• Establish project plans, governance structures and communication frameworks
• Onboard stakeholders and define working agreements to achieve project objectives
• Report weekly on project progress, impediments and identified risks
• Take proactive actions to ensure timely delivery of agreed outcomes
• Plan and coordinate people and resources against project timelines
• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows
• Support data management and analytics activities using Python

Skills

IT risk assessments

risk monitoring

risk management frameworks

audit management

remediation planning

evidence collection

cross‑organizational risk

SharePoint administration

Power Apps

Power Automate

Education

Bachelor's degree in IT / Computer Science

Tools

SharePoint

Power Apps

Power Automate

Python

Oracle

DB2

MSSQL

PostgreSQL

Job description

Senior IT Risk & Audit Compliance Analyst

Position: Senior IT Risk & Audit Compliance Analyst

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Senior IT Risk & Audit Compliance Analyst

Responsibilities:

• Conduct IT risk assessments from risk identification through action planning and risk monitoring
• Design and drive audit remediation plans, strategies and audit closure activities
• Collect, document and present audit evidence and technical artefacts
• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions
• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues
• Establish project plans, governance structures and communication frameworks
• Onboard stakeholders and define working agreements to achieve project objectives
• Report weekly on project progress, impediments and identified risks
• Take proactive actions to ensure timely delivery of agreed outcomes
• Plan and coordinate people and resources against project timelines
• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows
• Support data management and analytics activities using Python

Requirements:

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks
• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives
• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets
• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management
• Senior to expert knowledge of vulnerability management, security testing and scanning tools
• Strong understanding of security threats, web-based threats and mitigation techniques
• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems
• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis
• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting
• Expert-level experience with SharePoint administration and development, Power Apps and Power Automate
• Mid to senior-level Python skills for data management and analytics
• Excellent organizational, communication and negotiation skills
• Ability to motivate stakeholders and manage expectations
• Proven ability to identify risks, control weaknesses and remediation actions
• Strong analytical skills with proactive problem-solving approach
• Very good command of English, both spoken and written

Nice to have:

• Familiarity with internal risk methods, tools and approaches
• Knowledge of security risk management and governance
• Experience coaching and upskilling junior audit and risk professionals
• Politically sensitive and persuasive communication style
• Trustworthy approach and ability to acknowledge and learn from incorrect decisions

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant