Senior IT Risk & Security Specialist

This role is in the banking industry, focusing on IT risk and audit within a hybrid work setting in multiple Polish cities including Warszawa, Łódź, Gdańsk, and Gdynia.

• Knowledge of DNS, TCP/IP, network architecture, and cloud environments.
• Use of security scanning and testing tools.
• Vulnerability and security patch management.
• Incident management expertise.
• Familiarity with Service Delivery processes and CMDB.
• Knowledge of banking systems and applications including transactional banking, corporate banking, asset management, and trading.
• Understanding of Business Continuity, Business Impact Analysis (BIA), and Business Analysis.

Must-have technical skills:

• DNS
• IP networking
• TCP/IP
• Network architecture
• Cloud networking
• Internet-facing assets

Database knowledge:

• Oracle
• DB2
• MS SQL
• PostgreSQL

SharePoint:

• Administration of SharePoint
• Designing and developing SharePoint lists
• Experience with Power Apps and Power Automate
• Maintenance and development of solutions

Python:

• Data management
• Data analytics
• Automation and reporting

• Conduct IT risk assessments from identification to monitoring remediation actions.
• Create and implement remediation plans following audits.
• Collect and document audit evidence and technical artifacts.
• Manage audit closure processes and collaborate with auditors.
• Communicate risks, remediation actions, and impacts to management.
• Work with banking regulations and compliance requirements including DORA, NIS2, FSA guidelines, and ECB standards.
• Close non-compliance issues and recommendations from ECB and GIA audits.
• Manage security of Oracle, DB2, MS SQL, and PostgreSQL databases.