Senior Risk & Controls Manager (IT)

OLX; Kraków; Hybrid; PLN 260,000 - 420,000; Full time

Benefits offered by this job

Annual bonus

Medical insurance

Flexible benefits

Hybrid work model

Job summary

OLX is seeking a Senior Risk & Controls professional to own our technology risk and compliance program across markets. You will lead ITGC, audits, and risk processes, acting as the main contact for risk owners, auditors, and C-level stakeholders.

In this hands-on role you will advance the IT risk framework, coordinate audit plans, monitor issue closure, and support a new risk and compliance system, while partnering with CTO and security teams.

Qualifications

• Expertise in technology risk, IT audit, or IT governance across multi-market environments.
• Experience in internal Risk & Controls functions, IT-audit teams or IT risk assurance services.
• Strong knowledge of IT control frameworks (ISO 27001, NIST) and audit support experience.
• Experience with risk registers, controls testing and issue-tracking processes.

Responsibilities

• Identify, assess and mitigate technology risk across the organization, focusing on product platforms; maintain risk registers.
• Develop and monitor IT risk treatment strategies and governance.
• Coordinate with Internal Audit on audit plans and closure of audit issues.
• Lead year-end ITGC testing cycles with external auditors and drive issue resolution.
• Advise CTO and security teams on IT risk and security; support implementation of risk/compliance systems.
• Maintain ITGC framework and testing methodologies and build internal testing capabilities.

Skills

Technology risk

IT audit

IT governance

Stakeholder influence

Communication

Problem solving

GRC tooling

Education

CISA certification

CRISC certification

Tools

GRC platforms

Job description

WELCOME TO OLX

We're buildingmarketplace sustainable ecosystemsthat millions of people depend on every month – to buy and sell cars, find homes, land jobs, and trade secondhand goods. It's commerce that matters:safe,smart, andenvironmentally responsible.

We do this withcourageto innovate,commitmentto outcomes,collaborationacross 50+ nationalities and 7 markets, and a customer-ledapproach that puts real people first. Add adesire to win– and you get a culture that's ambitious, fast-moving, and built on trust.

Our brands - including AutoTrader, OLX, Otomoto, Property24, and more - are loved by millions. And we're backed by Prosus, one of the world's largest tech investors.

Join OLX and see how far you can go.

We're looking for a Senior Risk & Controls professional to take operational ownership of our technology risk and compliance program across all markets. In this hands-on role, you'll be the driving force behind our ITGC, audit, and risk processes - the go-to person for technology risk owners, auditors, and C-level stakeholders alike.

You'll lead the IT part of Enterprise Risk Management at OLX - making sure technology risks across our organisation are identified, understood and effectively mitigated. If you thrive at the intersection of technology risk, audit excellence, and stakeholder influence - and want to make a tangible mark on how a growing, multi-market organisation manages its risk landscape - this is your role.

What you'll be doing?

• Drive the identification, assessment and mitigation of technology risk across the organization, with primary focus on our product platforms - keeping the Technology Risk Register current, ensuring risk owners are accountable
• Develop, coordinate and monitor of IT risk treatment strategies
• Partner closely with the Internal Audit team, including a decisive role in audit plan development, as well as monitoring of the closure of audit issues.
• Coordinate the year-end external auditor ITGC testing cycle end-to-end - and drive findings through to resolution.
• Act as advisor to CTO and security teams across all aspects of IT risk and security.
• Lead and support the implementation of the group's new Risk & Compliance system.
• Maintain and apply the ITGC control framework and testing methodology, and support the buildout of internal testing capability (currently performed by the external auditor and partly by Internal Audit).

What will you need to be successful in this role?

• Expertise in technology risk, IT audit, or IT governance, ideally with exposure to multi-market environments.
• Previous experience in an internal Risk & Controls function, an IT-focused internal audit team or a Big 4 practice delivering IT/Technology Risk Assurance services.
• Solid working knowledge of IT control and security frameworks (ISO 27001, NIST) and practical experience supporting external and internal audits.
• Experience with risk registers, controls testing, and issue-tracking processes; detail-oriented and highly organised.
• Proven ability to influence and align senior stakeholders - excellent communication, presentation, and negotiation skills, with the confidence to chase and influence risk/control owners without formal authority over them.
• A technology-savvy mindset with the confidence to constructively challenge decisions and opinions.
• Client-friendly, collaborative, and a pragmatic problem-solver who actively listens to stakeholders.

Helpful, but not required:

• Familiarity with GRC / risk-register tooling, including experience with a platform migration or implementation.
• Professional certification such as CISA or CRISC.

What can we offer?

• Unique opportunity to become a part of an international group and one of the major Internet Brands in the world, contributing to the global OLX success.
• Fun and informal environment where getting stuff done and enjoying the ride is far more important than rules and hierarchies.
• Continuous investment in your development, through trainings and e-courses.
• Complex compensation package (annual performance-based bonus, medical insurance, flexible benefits).
• Work in a hybrid model - three days per week from the office.

Diversity, Equity and Inclusion at OLX

OLX values diversity and welcomes applicants of all races, ethnicities, disabilities, ages, genders, sexual orientations, religions, backgrounds, and experiences to apply.

OLX will process your personal data to assess your fit for the applied position. You may optionally consent to store your data for up to 12 months after the application process for consideration in future OLX roles. For more details on how your application data will be processed please check our Privacy Statement.

You have the right to report a violation of the law via website or by phone using any of the phone numbers listed on this site. The verification of reports and the undertaking of follow-up actions are handled by authorized members of the ethics and compliance team. All reports will be treated with the utmost care, confidentiality and in accordance with applicable law.