Enterprise Risk Analyst

XTB is a global company from the financial industry, focusing on online trading of financial instruments. It is the largest FinTech company in Poland and a leader in Central and Eastern Europe, with operations in several countries including Asia and South America. XTB offers training and development programs to employees and is a certified Great Place to Work company.

• Proven experience in Enterprise Risk Management, Operational risk, TPRM or a related second-line risk role within a financial institution or another regulated organisation.
• Practical track record in developing or materially improving risk management processes or methodologies.
• Hands-on experience with risk assessments, including RCSA, risk registers, control effectiveness assessments or similar methodologies.
• Good understanding of Risk Appetite Frameworks and KRIs, including experience in defining, monitoring or challenging risk appetite metrics and thresholds.
• Experience in risk management information and internal risk reporting, with the ability to identify key trends, emerging risks and translate complex information into clear recommendations for senior management.
• Very good communication and stakeholder management skills, with the ability to work effectively with business owners and senior management.
• Fluency in English.

• Further develop and enhance the Enterprise Risk Management framework, including risk identification, assessment, monitoring, reporting and escalation methodologies.
• Develop and maintain the Risk Appetite Framework, including risk appetite statements, limits and KRIs, and support effective monitoring and escalation of exposures against appetite.
• Coordinate and challenge RCSA processes across the organisation, working with business owners to ensure that material risks, controls and remediation actions are appropriately identified and assessed.
• Support the assessment of ICT and operational resilience risks from an enterprise-wide perspective, monitoring of key exposures and reporting to senior management.
• Support the assessment and monitoring of material third-party risks, including key provider dependencies, concentration risks and potential business impact.
• Prepare and continuously improve management risk reporting, including risk dashboards and materials for Management Board and Risk Committee.
• Develop and maintain risk management tools and systems, supporting effective risk assessment, monitoring and reporting.