IT Risk and Data Protection Specialist

UniCredit in Poland is part of one of the largest financial groups in Europe, serving over 15 million clients and acting as the Group’s pan-European innovation hub. The company builds a new banking model combining fintech speed and universal bank stability, offering an "all-in-one" application and omnichannel service through branches and a Support Center.

• Exceptional attention to detail and problem-solving ability for complex issues.
• Persistence and curiosity to investigate and find solutions.
• Mindset focused on efficiency and automation, including use of AI tools.
• Openness to learning and adapting to new tools and processes quickly.
• Strong communication skills for effective collaboration with system owners, teams, and users.
• Fluency in English and Polish, both written and spoken.
• Previous experience in IAM or IT Support is a plus but not mandatory.

User Lifecycle Management (Onboarding, Offboarding & Movers):

• Execute end-to-end access provisioning, modification, and revocation for employees and third-party users.
• Perform manual verifications and adjust access rights based on role mapping matrices across internal systems.

Access Requests & Incident Management:

• Manage daily IAM ticket queue, assigning access rights to supported systems.
• Assist users through support channels to resolve access issues.

System Recertifications & Asset Governance:

• Regularly review user access to validate permissions.
• Confirm access rights with system owners and correct discrepancies.
• Update internal databases and documentation with current access info.

Integrations & System Onboarding:

• Support onboarding of new applications into the IAM framework.
• Collaborate with system owners to define access rules, role mappings, and user groups.

Periodic Controls, Audits & Compliance:

• Execute periodic IAM controls to verify process effectiveness.
• Collect evidence and maintain records for compliance with standards like DORA.

Please be informed that the data controller is UniCredit (hereinafter "controller"). You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.