Senior Risk & Controls Manager (IT)

OLX; Poznań; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Annual bonus

Medical insurance

Flexible benefits

Job summary

OLX is seeking a Senior Risk & Controls professional to own technology risk and compliance across markets. You’ll drive ITGC, audits, and risk processes, collaborating with auditors, CTOs, and security teams to ensure effective risk mitigation.

This role emphasizes cross-market impact and hands-on risk leadership. The position offers a hybrid work model (3 days in the Poznań office) and a chance to influence risk across a growing global brand.

Qualifications

• Experience in technology risk, IT audit, or IT governance.
• Experience in internal Risk & Controls or IT audit teams.
• Knowledge of IT control frameworks (ISO 27001, NIST).
• Experience with risk registers and controls testing.
• Ability to influence senior stakeholders and communicate effectively.
• Tech-savvy mindset; able to challenge decisions constructively.
• Familiarity with risk-management tooling is a plus.

Responsibilities

• Identify, assess and mitigate technology risk across the organization.
• Develop IT risk treatment strategies and monitor their effectiveness.
• Collaborate with Internal Audit on audit plans and issue closures.
• Coordinate year-end external ITGC testing and drive remediation.
• Advise CTO and security teams on IT risk and security matters.
• Lead the implementation of the group's Risk & Compliance system.
• Maintain ITGC controls framework and testing methodologies.

Skills

Technology risk

IT audit

IT governance

Stakeholder influence

Communication skills

Multi-market exposure

Problem solving

Tech-savvy

Regulatory awareness

Tools

ISO 27001

NIST

Job description

WELCOME TO OLX

We're buildingmarketplace sustainable ecosystems that millions of people depend on every month – to buy and sell cars, find homes, land jobs, and trade secondhand goods. It's commerce that matters:safe,smart, andenvironmentally responsible.

We do this withcourage to innovate,commitment to outcomes,collaboration across 50+ nationalities and 7 markets, and a customer-led approach that puts real people first. Add adesire to win– and you get a culture that's ambitious, fast-moving, and built on trust.

Our brands – including AutoTrader, OLX, Otomoto, Property24, and more – are loved by millions. And we're backed by Prosus, one of the world's largest tech investors.

Join OLX and see how far you can go.

We're looking for a Senior Risk & Controls professional to take operational ownership of our technology risk and compliance program across all markets. In this hands-on role, you'll be the driving force behind our ITGC, audit, and risk processes — the go-to person for technology risk owners, auditors, and C-level stakeholders alike.

You'll lead the IT part of Enterprise Risk Management at OLX - making sure technology risks across our organisation are identified, understood and effectively mitigated. If you thrive at the intersection of technology risk, audit excellence, and stakeholder influence — and want to make a tangible mark on how a growing, multi-market organisation manages its risk landscape — this is your role.

What you'll be doing?

• Drive the identification, assessment and mitigation of technology risk across the organization, with primary focus on our product platforms - keeping the Technology Risk Register current, ensuring risk owners are accountable
• Develop, coordinate and monitor of IT risk treatment strategies
• Partner closely with the Internal Audit team, including a decisive role in audit plan development, as well as monitoring of the closure of audit issues.
• Coordinate the year-end external auditor ITGC testing cycle end-to-end — and drive findings through to resolution.
• Act as advisor to CTO and security teams across all aspects of IT risk and security.
• Lead and support the implementation of the group's new Risk & Compliance system.
• Maintain and apply the ITGC control framework and testing methodology, and support the buildout of internal testing capability (currently performed by the external auditor and partly by Internal Audit).

What will you need to be successful in this role?

• Expertise in technology risk, IT audit, or IT governance, ideally with exposure to multi-market environments.
• Previous experience in an internal Risk & Controls function, an IT-focused internal audit team or a Big 4 practice delivering IT/Technology Risk Assurance services.
• Solid working knowledge of IT control and security frameworks (ISO 27001, NIST) and practical experience supporting external and internal audits.
• Experience with risk registers, controls testing, and issue-tracking processes; detail-oriented and highly organised.
• Proven ability to influence and align senior stakeholders — excellent communication, presentation, and negotiation skills, with the confidence to chase and influence risk/control owners without formal authority over them.
• A technology-savvy mindset with the confidence to constructively challenge decisions and opinions.
• Client-friendly, collaborative, and a pragmatic problem-solver who actively listens to stakeholders.

Helpful, but not required:

• Familiarity with GRC / risk-register tooling, including experience with a platform migration or implementation.
• Professional certification such as CISA or CRISC.

What can we offer?

• Unique opportunity to become a part of an international group and one of the major Internet Brands in the world, contributing to the global OLX success.
• Fun and informal environment where getting stuff done and enjoying the ride is far more important than rules and hierarchies.
• Continuous investment in your development, through trainings and e-courses.
• Complex compensation package (annual performance-based bonus, medical insurance, flexible benefits).
• Work in a hybrid model - three days per week from the office.

Diversity, Equity and Inclusion at OLX

OLX values diversity and welcomes applicants of all races, ethnicities, disabilities, ages, genders, sexual orientations, religions, backgrounds, and experiences to apply.

OLX will process your personal data to assess your fit for the applied position. You may optionally consent to store your data for up to 12 months after the application process for consideration in future OLX roles. For more details on how your application data will be processed please check our Privacy Statement.

Grupa OLX sp. z o.o. has implemented an internal procedure for reporting violations of the law. You have the right to report a violation of the law via website or by phone using any of the phone numbers listed on this site. The verification of reports and the undertaking of follow-up actions are handled by authorized members of the ethics and compliance team. All reports will be treated with the utmost care, confidentiality and in accordance with applicable law.