Senior IT Risk Specialist
HybridKrakow, Łódź Voivodeship, Republic of Poland
Job Summary
Conduct IT risk assessments across critical services, new products, and projects by identifying, assessing, and supporting mitigation of risks while ensuring alignment with internal policies. Provide second-line oversight through independent review and challenge of IT risk assessments to guarantee compliance with frameworks, regulatory requirements, and industry standards. Respond to internal control inquiries, track remediation efforts to resolution, and support the design and effectiveness of IT controls. Prepare and maintain risk reports using standard templates, including risk scenarios, heatmaps, and risk registers. Participate in ongoing risk monitoring meetings to ensure continuous assessment of emerging risks and project dependencies. Work with cross-functional teams and the first line of defense to manage unacceptable risks based on established methodology criteria.
Required Qualifications
- Degree in Engineering, Computer Science, Information Systems, or a related field
- At least 10 years of work experience in IT risk management, cybersecurity, IT audit or related fields
- Excellent command of spoken and written English
Desired Qualifications
- Familiarity with (preferably solid experience with) using relevant industry standard IT standards and frameworks such as IRAM2, COBIT, ITIL and ISO27001
- Strong understanding of regulatory requirements and industry standards (e.g. EBA, DORA, GDPR, ISO 27001/27002, NIST, PSD2, ISO 22301, NIS2) related to IT risk management and cybersecurity
- Self-driven and demonstrate the ability to take full ownership of activities and responsibilities, ensuring tasks are completed efficiently and effectively, and proactively addressing any challenges that may arise
- Strong interpersonal, communication and presentation skills necessary for interaction with business leaders and teams across all levels of the organization
- Passionate about continuously acquiring knowledge and desire to grow
- Foster a work environment that promotes respect, cultural awareness, and the development of skills to engage effectively with individuals from diverse backgrounds
- Knowledge of both financial services industry and payment processing industry
- Curiosity and experience in designing or applying emerging technologies, such as AI agents and automation solutions, to improve IT risk processes and insights
- Advanced degree or relevant certifications (e.g., CISSP, CISM, CRISC, CISA, PRINCE2, PMP)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.