IT Risk & Compliance Advisor​ | f/m/d

ERGO Technology & Services S.A. (ET&S), a member of the Munich Re and ERGO Group, provides integrated IT and business services internationally, focusing on modern business-driven technology solutions and supporting end-to-end insurance processes. The company has offices in Warsaw and Gdansk and maintains strong global partnerships fostering a multicultural environment.

• Fluency in English
• University degree in Computer Engineering/IT, Business Administration, or related field
• 5+ years of IT Audit experience in financial services, insurance, banking, or regulated industries
• Experience performing IT audits against regulatory requirements and industry standards
• Proficient in financial services-relevant regulations, especially DORA
• 2+ years experience working with senior stakeholders and executive management
• Excellent communication skills and sound judgment
• Ability to manage multiple stakeholders and competing priorities
• Ability to oversee and handle multiple requests calmly and maintain confidentiality
• Willingness to undertake occasional global travel

Nice to have:

• German language proficiency
• Relevant certifications such as CISA, CISSP, or similar
• Big 4 Consulting/Assurance/Audit experience
• Awareness of industry trends on regulatory compliance, emerging threats, and technologies
• Experience managing business and partner relationships
• Ability to document and present content clearly and engagingly
• Project management expertise in planning and coordinating internal audits during external/regulatory audits

• Serve as the central point of contact for internal and external IT audits, IT-related regulatory questionnaires, and inspections
• Support end-to-end coordination of IT audits including preparation, fieldwork, reporting, and follow-up
• Support discussions with auditors and regulators to ensure accurate reflection of audit conclusions
• Track and monitor IT audit-related measures and maintain audit registers
• Prepare and support reporting to stakeholders, including senior management and Service Review Meetings
• Foster global collaboration and knowledge sharing among IT Risk & Compliance teams