Senior IT Risk & Audit Compliance Analyst

Responsibilities

• Conduct IT risk assessments from risk identification through action planning and risk monitoring
• Design and drive audit remediation plans, strategies and audit closure activities
• Collect, document and present audit evidence and technical artefacts
• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions
• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues
• Establish project plans, governance structures and communication frameworks
• Onboard stakeholders and define working agreements to achieve project objectives
• Report weekly on project progress, impediments and identified risks
• Take proactive actions to ensure timely delivery of agreed outcomes
• Plan and coordinate people and resources against project timelines
• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows
• Support data management and analytics activities using Python

Requirements

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks
• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives
• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets
• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management
• Senior to expert knowledge of vulnerability management, security testing and scanning tools
• Strong understanding of security threats, web-based threats and mitigation techniques
• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems
• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis
• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting
• Expert-level experience with SharePoint administration and development, Power Apps and Power Automate
• Mid to senior-level Python skills for data management and analytics
• Excellent organizational, communication and negotiation skills
• Ability to motivate stakeholders and manage expectations
• Proven ability to identify risks, control weaknesses and remediation actions
• Strong analytical skills with proactive problem-solving approach
• Very good command of English, both spoken and written

Nice to have

• Familiarity with internal risk methods, tools and approaches
• Knowledge of security risk management and governance
• Experience coaching and upskilling junior audit and risk professionals
• Politically sensitive and persuasive communication style
• Trustworthy approach and ability to acknowledge and learn from incorrect decisions

Offer

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant
• Employee referral program