Control Analyst

Mindbox is a tech-driven company connecting top IT talents with technology projects for leading enterprises across Europe, focusing on consulting, engineering, and talent development.

• Proven experience in an Agile delivery environment (e.g., Change/Control Analyst, Business Analyst, Test Analyst).
• Strong ability to define and present compliance evidence for audits or assurance.
• Working knowledge of change delivery and related tools (e.g., ServiceNow or equivalent).
• Good understanding of governance, risk, and control frameworks.
• Excellent stakeholder engagement and facilitation skills, including running workshops.
• Proficiency with reporting and analysis tools (Excel, PowerPoint, process mapping with Visio).
• Strong communication skills in English – both written and verbal.

Nice to have:

• Familiarity with DevOps metrics and performance tracking.
• Industry certifications: ITIL, Agile/SAFe, IIBA.
• Experience using QA/test management tools (qTest, Tricentis, Zephyr).
• Knowledge of application security testing (SAST/DAST/MAST) and vulnerability management.
• Hands-on experience with Jira, Confluence, ServiceNow, and reporting tools such as Google Data Studio or Excel Power Query.

• Define and embed good practice: clarify expectations for SDLC and Deployment controls and coach teams on compliance.
• Run spot-checks: conduct control-related reviews for Cyber changes and applications; document findings and track remediation.
• Evidence and reporting: ensure complete, audit-ready compliance evidence (testing records, approvals, change logs) and maintain regulatory reporting.
• Monitor DevOps metrics: track software delivery KPIs, identify gaps or trends, and recommend corrective actions.
• Training and enablement: develop and deliver training and communications to drive adoption of SDLC/DEPL processes and metrics.
• Stakeholder management: lead workshops and working sessions to align expectations, resolve issues, and build consensus.
• Continuous improvement: simplify workflows and improve documentation to make compliance more seamless for engineering teams.