Senior Risk & Controls Manager (IT)

OLX; Warszawa; Hybrid; PLN 210,000 - 270,000; Full time

Benefits offered by this job

Hybrid work model

Medical insurance

Performance bonus

Job summary

OLX is seeking a Senior Risk & Controls professional to own our technology risk and compliance program across markets. You will drive ITGC, audit processes, and risk management, partnering with senior stakeholders and the CTO to mitigate technology risks effectively.

The role focuses on identifying risks, coordinating with Internal Audit, and supporting rollout of risk and compliance systems. A hands-on leader with strong communication will thrive in our multi-market environment.

Qualifications

• Experience in technology risk, IT audit or governance in multi-market setup.
• Background in internal Risk & Controls or IT-focused audits.
• Knowledge of ISO 27001 or NIST and audit support.

Responsibilities

• Identify, assess, and mitigate technology risk across platforms.
• Partner with Internal Audit and drive audit plan and issue closure.
• Lead ITGC testing cycle with external auditor and remediation.
• Advise CTO and security teams on IT risk/security.

Skills

Technology risk

IT audit

IT governance

Stakeholder management

Tools

GRC tooling

Job description

WELCOME TO OLX

We’re building

environmentally responsible.

We do this with

WELCOME TO OLX

We’re building marketplace sustainable ecosystems that millions of people depend on every month – to buy and sell cars, find homes, land jobs, and trade secondhand goods. It’s commerce that matters: safe, smart, and environmentally responsible.

We do this with courage to innovate, commitment to outcomes, collaboration across 50+ nationalities and 7 markets, and a customer-led approach that puts real people first. Add a desire to win – and you get a culture that’s ambitious, fast-moving, and built on trust.

Our brands – including AutoTrader, OLX, Otomoto, Property24, and more – are loved by millions. And we’re backed by Prosus, one of the world’s largest tech investors.

Join OLX And See How Far You Can Go.

We’re looking for a Senior Risk & Controls professional to take operational ownership of our technology risk and compliance program across all markets. In this hands-on role, you’ll be the driving force behind our ITGC, audit, and risk processes — the go-to person for technology risk owners, auditors, and C-level stakeholders alike.

You’ll lead the IT part of Enterprise Risk Management at OLX - making sure technology risks across our organisation are identified, understood and effectively mitigated.

If you thrive at the intersection of technology risk, audit excellence, and stakeholder influence — and want to make a tangible mark on how a growing, multi-market organisation manages its risk landscape — this is your role.

What you’ll be doing?

• Drive the identification, assessment and mitigation of technology risk across the organization, with primary focus on our product platforms - keeping the Technology Risk Register current, ensuring risk owners are accountable
• Develop, coordinate and monitor of IT risk treatment strategies
• Partner closely with the Internal Audit team, including a decisive role in audit plan development, as well as monitoring of the closure of audit issues.
• Coordinate the year-end external auditor ITGC testing cycle end-to-end — and drive findings through to resolution.
• Act as advisor to CTO and security teams across all aspects of IT risk and security.
• Lead and support the implementation of the group’s new Risk & Compliance system.
• Maintain and apply the ITGC control framework and testing methodology, and support the buildout of internal testing capability (currently performed by the external auditor and partly by Internal Audit).

What will you need to be successful in this role?

• Expertise in technology risk, IT audit, or IT governance, ideally with exposure to multi-market environments.
• Previous experience in an internal Risk & Controls function, an IT-focused internal audit team or a Big 4 practice delivering IT/Technology Risk Assurance services.
• Solid working knowledge of IT control and security frameworks (ISO 27001, NIST) and practical experience supporting external and internal audits.
• Experience with risk registers, controls testing, and issue-tracking processes; detail-oriented and highly organised.
• Proven ability to influence and align senior stakeholders — excellent communication, presentation, and negotiation skills, with the confidence to chase and influence risk/control owners without formal authority over them.
• A technology-savvy mindset with the confidence to constructively challenge decisions and opinions.
• Client-friendly, collaborative, and a pragmatic problem-solver who actively listens to stakeholders.

Helpful, But Not Required

• Familiarity with GRC / risk-register tooling, including experience with a platform migration or implementation.
• Professional certification such as CISA or CRISC.

What can we offer?

• Unique opportunity to become a part of an international group and one of the major Internet Brands in the world, contributing to the global OLX success.
• Fun and informal environment where getting stuff done and enjoying the ride is far more important than rules and hierarchies.
• Continuous investment in your development, through trainings and e-courses.
• Complex compensation package (annual performance-based bonus, medical insurance, flexible benefits).
• Work in a hybrid model - three days per week from the office.

Diversity, Equity and Inclusion at OLX

OLX values diversity and welcomes applicants of all races, ethnicities, disabilities, ages, genders, sexual orientations, religions, backgrounds, and experiences to apply. If this role excites you, we encourage you to apply, even if you don’t meet all the requirements - you may be just the right fit for this or other opportunities with us!

OLX will process your personal data to assess your fit for the applied position. You may optionally consent to store your data for up to 12 months after the application process for consideration in future OLX roles. For more details on how your application data will be processed please check our Privacy Statement.

Grupa OLX sp. z o.o. has implemented an internal procedure for reporting violations of the law. You have the right to report a violation of the law via website or by phone using any of the phone numbers listed on this site. The verification of reports and the undertaking of follow-up actions are handled by authorized members of the ethics and compliance team. All reports will be treated with the utmost care, confidentiality and in accordance with applicable law.