Senior IT Risk & Audit Compliance Analyst

Responsibilities:

Conduct IT risk assessments from risk identification through action planning and risk monitoring

• Design and drive audit remediation plans, strategies and audit closure activities
• Collect, document and present audit evidence and technical artefacts
• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions
• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues
• Establish project plans, governance structures and communication frameworks
• Onboard stakeholders and define working agreements to achieve project objectives
• Report weekly on project progress, impediments and identified risksTake proactive actions to ensure timely delivery of agreed outcomes
• Plan and coordinate people and resources against project timelines
• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows
• Support data management and analytics activities using Python Requirements:

Strong experience in IT risk assessments, risk monitoring and risk management frameworks

• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives
• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets
• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management
• Senior to expert knowledge of vulnerability management, security testing and scanning tools
• Strong understanding of security threats, web-based threats and mitigation techniques
• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems
• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis
• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting
• Expert-level experience with SharePoint administration and development, Power Apps and Power AutomateMid to senior-level Python skills for data management and analytics
• Excellent organizational, communication and negotiation skills
• Ability to motivate stakeholders and manage expectations
• Proven ability to identify risks, control weaknesses and remediation actions
• Strong analytical skills with proactive problem-solving approach
• Very good command of English, both spoken and written
• Nice to have:

Familiarity with internal risk methods, tools and approaches

• Knowledge of security risk management and governance
• Experience coaching and upskilling junior audit and risk professionals
• Politically sensitive and persuasive communication style
• Trustworthy approach and ability to acknowledge and learn from incorrect decisions Offer:

Private medical careCo-financing for the sports card

Constant support of dedicated consultant

Employee referral program