IT Audit & Risk Officer

ING Hubs Poland is hiring!

We are looking for you, if you:

• have knowledge in information security, risk management or compliance areas,
• have excellent communication skills to clearly and succinctly express ideas, facts and opinions fluently both in speaking and writing,
• have strong analytics skills to identify problems, analyze key information and make connections, to find appropriate solutions,
• are oriented on result and delivery to complete tasks and achieve goals in an efficient, timely and high-quality manner.

English level: B2

You'll get extra points for:

• experience in performing security/compliance checks or auditing either internal or external parties,
• relevant IT security certificates (CISSP, CISA, CRISC, CompTIA Security+, ISO 27000),
• product/technology certifications (especially cloud solutions, but also operating systems, databases),
• experience of working in an international environment.

Your responsibilities:

• Identifying, analyzing, and assessing of risks related to IT systems, infrastructure, and business processes.
• Support the development and implementation of IT risk management policies, procedures and standards.
• Perform internal compliancy checks and support in IT audits preparations.
• Monitor compliance with internal and external, legal and regulatory requirements (e.g., GDPR, DORA, NIS2) and industry standards (ISO 27001, COBIT, ITIL).
• Report risks and remediation actions to senior management.
• Support Asset Owners in effective IT Risk Management and technical compliance.
   

Information about the squad:

The team is 1st Line of Defense responsible for internal implementation, development and monitoring of Information Technology Risk in Global CISO domain. It is focused on verification and assessment of security and IT risk management processes. Support Asset Owners in effective IT Risk Management and technical compliance. Additionally, it provides broad and comprehensive IT security consultations in the design, implementation and maintenance of IT systems.

The role naming convention in the global ING job architecture will be “Engineer III”.