IT Resilience Architect

IT Factory is a dynamic company with experience in the development, implementation, and support of IT solutions, working for a leading insurance and financial group in Poland.

• Practical knowledge of DORA with the ability to translate its requirements into IT architecture, technical controls, and operational processes
• Experience designing or developing resilience mechanisms such as availability, redundancy, backup, disaster recovery, business continuity, monitoring, and incident response
• Knowledge of digital resilience testing principles: recovery tests, scenario tests, vulnerability tests, penetration tests
• Ability to build and maintain documentation confirming compliance with regulatory requirements
• Experience in hybrid environments including on-premise, cloud, networks, directory services, applications, and integrations
• Ability to map dependencies among business processes, IT services, applications, data, infrastructure, and vendors
• Practical knowledge of information security management and cyber risk management

Nice to have:

• Experience in financial, insurance, payment sectors, or other highly regulated environments
• Knowledge of standards and methodologies: ISO 27001, ISO 22301, ISO 27005, NIST CSF, NIST SP 800-53, COBIT, ITIL
• Experience designing platforms with high availability, multiregional, active-active replication
• Certifications: CISM, CISSP, CISA

• Designing, developing, and maintaining IT architecture aligned with DORA requirements
• Defining and implementing the target IT resilience architecture model
• Analyzing and optimizing information security and cybersecurity management models
• Identifying, recording, monitoring, and mitigating technological and cyber risks
• Conducting activities to enhance IT environment resilience against threats, failures, and incidents
• Collaborating with CIO, CTO, CISO, and service owners to realize IT priorities
• Preparing management materials, reports, and analyses regarding IT status

Please be informed that the data controller is IT Factory. You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.