IT Controls Lead

The role is within a global Risk & Compliance Technology team responsible for embedding and strengthening IT controls across Risk & Compliance applications, supporting risk management objectives.

• Experience in IT controls, IT Risk Management, Technology Governance, and IT Audit.
• Proven track record of delivering results in complex technology environments.
• Strong analytical and problem-solving skills with a proactive, self-driven approach.
• Ability to work independently and effectively manage multiple priorities.
• Experience engaging and influencing senior technology stakeholders.
• Excellent written and verbal communication skills in English and Polish.
• Ability to translate complex technical and risk-related topics into clear, concise, and actionable insights.
• Strong stakeholder management and influencing skills.

Nice to have:

• Experience working with Financial Crime Risk or Compliance systems, such as Transaction Monitoring, Sanctions Screening, and AML-related platforms.
• Experience within a large financial services organization.
• Background in Assurance, Audit, Risk, Compliance, or Control functions.
• Familiarity with technology governance frameworks and control assessment methodologies.

• Understand and interpret Non-Financial Risk (NFR) IT control requirements and operating instructions.
• Partner with application owners to ensure IT control requirements are effectively implemented and maintained.
• Drive the adoption and embedding of key IT controls across the technology function, including Data Movement, Software Development Lifecycle (SDLC), Deployment Management, and other critical technology risk controls.
• Conduct periodic reviews and assessments of IT controls across selected applications and systems.
• Evaluate control effectiveness through documentation reviews, stakeholder interviews, spot checks, and analysis of available metrics and indicators.
• Identify control gaps, assess associated risks, and support application teams in developing and implementing remediation plans.
• Document assessment outcomes and provide clear, actionable recommendations.
• Communicate control status, risks, issues, and blockers to key stakeholders and senior management.
• Collaborate with stakeholders across Technology, Risk, Compliance, Control Functions, and Automation teams.
• Represent the IT Controls function in governance forums and management meetings.
• Support the continuous enhancement of control reporting, methodologies, and operating practices.
• Act as an advocate for strong risk management and control culture across the technology organization.

Work model: hybrid, 2x per week from office location in Kraków, Poland.