Senior Risk & Controls Manager (IT)

OLX; Warszawa; Hybrid; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Annual performance-based bonus

Medical insurance

Flexible benefits

Hybrid work model - 3 days in office

Job summary

OLX is seeking a Senior Risk & Controls professional to take ownership of our technology risk and compliance program across markets. You’ll drive ITGC, audits and risk processes — the go-to person for technology risk owners, auditors, and C‑level stakeholders alike.

You’ll lead IT risk management, develop risk treatment strategies, and support the rollout of the group’s Risk & Compliance system in a multi-market environment.

Qualifications

• Expertise in technology risk, IT audit or IT governance, with multi-market exposure.
• Experience in an internal Risk & Controls function or IT-focused internal audit/Big 4 practice.
• Solid knowledge of IT control frameworks (ISO 27001, NIST) and experience with audits.
• Experience with risk registers, controls testing and issue-tracking processes.
• Ability to influence senior stakeholders and communicate effectively with C-levels.
• Technology-savvy mindset and ability to challenge decisions constructively.

Responsibilities

• Drive identification, assessment and mitigation of technology risk across the organization, focusing on product platforms.
• Develop, coordinate and monitor IT risk treatment strategies.
• Partner with Internal Audit, contribute to audit plan development and monitor closure of issues.
• Coordinate year-end external ITGC testing and drive findings to resolution.
• Advise CTO and security teams on IT risk and security.
• Lead and support implementation of the group’s Risk & Compliance system.
• Maintain and apply ITGC control framework and support internal testing capabilities.

Skills

Technology risk

IT audit

IT governance

Stakeholder management

ISO 27001

NIST

Controls testing

Risk registers

CISA/CRISC

Tools

GRC tooling

Job description

WELCOME TO OLXWe're building marketplace sustainable ecosystems that millions of people depend on every month - to buy and sell cars, find homes, land jobs, and trade secondhand goods. It's commerce that matters: safe, smart, and environmentally responsible. We do this with courage to innovate, commitment to outcomes, collaboration across 50+ nationalities and 7 markets, and a customer-led approach that puts real people first. Add a desire to win - and you get a culture that’s ambitious, fast-moving, and built on trust.

Our brands - including AutoTrader, OLX, Otomoto, Property24, and more - are loved by millions. And we’re backed by Prosus, one of the world’s largest tech investors.

Join OLX And See How Far You Can Go. We're looking for a Senior Risk & Controls professional to take operational ownership of our technology risk and compliance program across all markets. In this hands‑on role, you’ll be the driving force behind our ITGC, audit, and risk processes — the go‑to person for technology risk owners, auditors, and C‑level stakeholders alike.

You’ll lead the IT part of Enterprise Risk Management at OLX - making sure technology risks across our organisation are identified, understood and effectively mitigated. If you thrive at the intersection of technology risk, audit excellence, and stakeholder influence — and want to make a tangible mark on how a growing, multi‑market organisation manages its risk landscape — this is your role.

What you will be doing?

• Drive the identification, assessment and mitigation of technology risk across the organization, with primary focus on our product platforms - keeping the Technology Risk Register current, ensuring risk owners are accountable
• Develop, coordinate and monitor of IT risk treatment strategies
• Partner closely with the Internal Audit team, including a decisive role in audit plan development, as well as monitoring of the closure of audit issues.
• Coordinate the year‑end external auditor ITGC testing cycle end‑to‑end — and drive findings through to resolution.
• Act as advisor to CTO and security teams across all aspects of IT risk and security.
• Lead and support the implementation of the group’s new Risk & Compliance system.
• Maintain and apply the ITGC control framework and testing methodology, and support the buildout of internal testing capability (currently performed by the external auditor and partly by Internal Audit).

What will you need to be successful in this role?

• Expertise in technology risk, IT audit, or IT governance, ideally with exposure to multi‑market environments.
• Previous experience in an internal Risk & Controls function, an IT‑focused internal audit team or a Big 4 practice delivering IT/Technology Risk Assurance services.
• Solid working knowledge of IT control and security frameworks (ISO 27001, NIST) and practical experience supporting external and internal audits.
• Experience with risk registers, controls testing, and issue‑tracking processes; detail‑oriented and highly organised.
• Proven ability to influence and align senior stakeholders — excellent communication, presentation, and negotiation skills, with the confidence to chase and influence risk/control owners without formal authority over them.
• A technology‑savvy mindset with the confidence to constructively challenge decisions and opinions.
• Client‑friendly, collaborative, and a pragmatic problem‑solver who actively listens to stakeholders.

Helpful, but not required:

• Familiarity with GRC / risk‑register tooling, including experience with a platform migration or implementation.
• Professional certification such as CISA or CRISC.

What can we offer?

• Unique opportunity to become a part of an international group and one of the major Internet Brands in the world, contributing to the global OLX success.
• Fun and informal environment where getting stuff done and enjoying the ride is far more important than rules and hierarchies.
• Continuous investment in your development, through trainings and e‑courses.
• Complex compensation package (annual performance‑based bonus, medical insurance, flexible benefits).
• Work in a hybrid model - three days per week from the office.

Diversity, Equity and Inclusion at OLX

OLX values diversity and welcomes applicants of all races, ethnicities, disabilities, ages, genders, sexual orientations, religions, backgrounds, and experiences to apply.

OLX will process your personal data to assess your fit for the applied position. You may optionally consent to store your data for up to 12 months after the application process for consideration in future OLX roles. For more details on how your application data will be processed please check our Privacy Statement. Grupa OLX sp. z o.o. has implemented an internal procedure for reporting violations of the law. You have the right to report a violation of the law via website or by phone using any of the phone numbers listed on this site. The verification of reports and the undertaking of follow‑up actions are handled by authorized members of the ethics and compliance team. All reports will be treated with the utmost care, confidentiality and in accordance with applicable law.