Starszy Specjalista ds. audytu IT/ICT (k/m)

Krajowy Depozyt Papierów Wartościowych S.A. (KDPW) is a capital group serving as a critical infrastructure of the capital market in Poland. KDPW and KDPW_CCP provide registering, storing, clearing, and settlement services for securities primarily to banks, brokerage houses, and issuers across the European Union. The company is a technology-driven organization ensuring security and stable organization of the capital market, developing most of their IT systems internally.

• Higher education in computer science, cybersecurity, finance/economics or related fields.
• Minimum 2 years of experience in IT audit (internal or external), information security, or IT internal control.
• Practical knowledge of IT and cybersecurity standards (e.g., ISO/IEC 27001, COBIT, NIST CSF, ITIL).
• Strong analytical skills and ability to clearly communicate technical matters to business stakeholders.
• Proficient English language skills, both spoken and written.

Nice to have:

• Professional certifications: CISA, CRISC, CISM, CISSP or technical certifications.
• Knowledge of financial sector regulations (DORA, KNF guidelines, ESMA).

• Prepare audit task programs and conduct audits of IT/ICT environment, technical infrastructure, databases, domain systems, and business applications.
• Verify effectiveness of general IT controls and automated application controls and system interfaces.
• Assess security architecture, vulnerability management procedures, business continuity and disaster recovery plans (BCP/DRP), and incident response processes.
• Evaluate risks related to technology service outsourcing, cloud security (IaaS/PaaS/SaaS), and verify attestation reports (e.g., SOC 1, SOC 2, ISO/IEC 27001).
• Analyze IT processes compliance with legal and regulatory requirements (including DORA, NIS2, KNF recommendations) and market standards (COBIT, ISO/IEC 27001, NIST CSF, CIS Controls).
• Prepare concise, fact-based audit reports, identify root causes of control gaps, and formulate pragmatic risk mitigation recommendations.
• Verify timeliness and effectiveness of implementing corrective action plans agreed with business units and IT.
• Collaborate with operational auditors on business process audits and utilize data analytics techniques (SQL, analytical scripts, BI tools) to test entire data populations and logs.

Application requires submission of CV with cover letter. Processing of personal data by Krajowy Depozyt Papierów Wartościowych S.A. is done in accordance with legal regulations for recruitment purposes. Withdrawal of consent for data processing does not affect the legality of prior processing.