Senior IT Risk & Audit Compliance Analyst

Diverse CG Sp. z o.o. Sp.k. is hiring for a Senior IT Risk & Audit Compliance Analyst to work on cross-organizational risk, audit, and compliance initiatives, particularly focusing on banking applications and compliance requirements such as NIS2, DORA, FSA guidelines, and ECB requirements.

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks
• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives
• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets
• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL, and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management
• Senior to expert knowledge of vulnerability management, security testing and scanning tools
• Strong understanding of security threats, web-based threats and mitigation techniques
• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems
• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis
• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting
• Expert-level experience with SharePoint administration and development, Power Apps and Power Automate
• Mid to senior-level Python skills for data management and analytics
• Excellent organizational, communication and negotiation skills
• Ability to motivate stakeholders and manage expectations
• Proven ability to identify risks, control weaknesses and remediation actions
• Strong analytical skills with proactive problem-solving approach
• Very good command of English, both spoken and written

Nice to have:

• Familiarity with internal risk methods, tools and approaches
• Knowledge of security risk management and governance
• Experience coaching and upskilling junior audit and risk professionals
• Politically sensitive and persuasive communication style
• Trustworthy approach and ability to acknowledge and learn from incorrect decisions

• Conduct IT risk assessments from risk identification through action planning and risk monitoring
• Design and drive audit remediation plans, strategies, and audit closure activities
• Collect, document, and present audit evidence and technical artefacts
• Communicate risks, remediation plans, priorities, effort estimates, and outcomes to senior leadership and control functions
• Support compliance activities related to NIS2, DORA, FSA guidelines, and ECB requirements
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues
• Establish project plans, governance structures, and communication frameworks
• Onboard stakeholders and define working agreements to achieve project objectives
• Report weekly on project progress, impediments, and identified risks
• Take proactive actions to ensure timely delivery of agreed outcomes
• Plan and coordinate people and resources against project timelines
• Design, develop, and maintain SharePoint lists, Power Apps solutions, and Power Automate flows
• Support data management and analytics activities using Python