Senior Risk & Controls Lead

OLX; Kraków; Hybrid; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Hybrid work model

Medical insurance

Flexible benefits

Annual bonus

Job summary

OLX is seeking a Senior Risk & Controls Lead in Kraków to take ownership of our technology risk and compliance program across markets. You will drive ITGC, audits and risk processes, acting as the go-to for risk owners, auditors, and CTO-level stakeholders.

You’ll lead IT risk management for a growing multinational group, partnering with security teams and Internal Audit, and implementing our new Risk & Compliance system in a hybrid work setup.

Qualifications

• Expertise in technology risk, IT audit, or IT governance across multi-market environments.
• Experience in internal Risk & Controls or Big 4 IT risk assurance.
• Solid knowledge of IT control and security frameworks (ISO 27001, NIST) and audit support.
• Experience with risk registers, controls testing, and issue tracking.
• Ability to influence senior stakeholders and communicate clearly.
• Tech-savvy mindset and collaborative problem-solver.

Responsibilities

• Drive identification, assessment and mitigation of technology risk across the organization.
• Develop and monitor IT risk treatment strategies.
• Partner with Internal Audit for audit plans and issue closure.
• Coordinate ITGC testing with external auditor and drive resolution.
• Advise CTO and security teams on IT risk and security.
• Lead implementation of the group’s Risk & Compliance system.
• Maintain ITGC framework and testing methodology.

Skills

Tech risk

IT audit

IT governance

Multi-market experience

Stakeholder management

Communication skills

Problem-solving

GRC tooling

Tools

GRC platforms

Job description

WELCOME TO OLX

We’re building marketplace sustainable ecosystems that millions of people depend on every month – to buy and sell cars, find homes, land jobs, and trade secondhand goods. It’s commerce that matters: safe,smart, and environmentally responsible.

We do this with courage to innovate, commitment to outcomes, collaboration across 50+ nationalities and 7 markets, and a customer-led approach that puts real people first. Add a desire to win – and you get a culture that’s ambitious, fast-moving, and built on trust.

Our brands – including AutoTrader, OLX, Otomoto, Property24, and more – are loved by millions. And we’re backed by Prosus, one of the world’s largest tech investors.

Join OLX and see how far you can go.

We’re looking for a Senior Risk & Controls Lead to take operational ownership of our technology risk and compliance program across all markets. In this hands‑on role, you’ll be the driving force behind our ITGC, audit, and risk processes — the go‑to person for technology risk owners, auditors, and C‑level stakeholders alike.

You’ll lead the IT part of Enterprise Risk Management at OLX - making sure technology risks across our organisation are identified, understood and effectively mitigated. If you thrive at the intersection of technology risk, audit excellence, and stakeholder influence — and want to make a tangible mark on how a growing, multi‑market organisation manages its risk landscape — this is your role.

What you’ll be doing?

• Drive the identification, assessment and mitigation of technology risk across the organization, with primary focus on our product platforms - keeping the Technology Risk Register current, ensuring risk owners are accountable
• Develop, coordinate and monitor of IT risk treatment strategies
• Partner closely with the Internal Audit team, including a decisive role in audit plan development, as well as monitoring of the closure of audit issues.
• Coordinate the year-end external auditor ITGC testing cycle end-to-end — and drive findings through to resolution.
• Act as advisor to CTO and security teams across all aspects of IT risk and security.
• Lead and support the implementation of the group’s new Risk & Compliance system.
• Maintain and apply the ITGC control framework and testing methodology, and support the buildout of internal testing capability (currently performed by the external auditor and partly by Internal Audit).

What will you need to be successful in this role?

• Expertise in technology risk, IT audit, or IT governance, ideally with exposure to multi‑market environments.
• Previous experience in an internal Risk & Controls function, an IT‑focused internal audit team or a Big 4 practice delivering IT/Technology Risk Assurance services.
• Solid working knowledge of IT control and security frameworks (ISO 27001, NIST) and practical experience supporting external and internal audits.
• Experience with risk registers, controls testing, and issue‑tracking processes; detail‑oriented and highly organised.
• Proven ability to influence and align senior stakeholders — excellent communication, presentation, and negotiation skills, with the confidence to chase and influence risk/control owners without formal authority over them.
• A technology‑savvy mindset with the confidence to constructively challenge decisions and opinions.
• Client‑friendly, collaborative, and a pragmatic problem‑solver who actively listens to stakeholders.

Helpful, but not required:

• Familiarity with GRC / risk‑register tooling, including experience with a platform migration or implementation.
• Professional certification such as CISA or CRISC.

What can we offer?

• Unique opportunity to become a part of an international group and one of the major Internet Brands in the world, contributing to the global OLX success.
• Fun and informal environment where getting stuff done and enjoying the ride is far more important than rules and hierarchies.
• Continuous investment in your development, through trainings and e‑courses.
• Complex compensation package (annual performance‑based bonus, medical insurance, flexible benefits).
• Work in a hybrid model - three days per week from the office.

Diversity, Equity and Inclusion at OLX

OLX values diversity and welcomes applicants of all races, ethnicities, disabilities, ages, genders, sexual orientations, religions, backgrounds, and experiences to apply.

OLX will process your personal data to assess your fit for the applied position. You may optionally consent to store your data for up to 12 months after the application process for consideration in future OLX roles. For more details on how your application data will be processed please check our Privacy Statement.

Grupa OLX sp. z o.o. has implemented an internal procedure for reporting violations of the law. You have the right to report a violation of the law via website or by phone using any of the phone numbers listed on this site. The verification of reports and the undertaking of follow‑up actions are handled by authorized members of the ethics and compliance team. All reports will be treated with the utmost care, confidentiality and in accordance with applicable law.