• Lead and manage IT group control initiatives to identify, assess, and mitigate risks across the organization’s IT landscape.
• Develop and implement risk management strategies, policies, and procedures to ensure the security and integrity of IT systems and data.
• Conduct regular risk assessments and vulnerability assessments to proactively identify potential threats and weaknesses in IT infrastructure.
• Collaborate with cross-functional teams to establish and maintain effective risk mitigation plans and remediation strategies.
• Stay current with industry trends, emerging technologies, and regulatory requirements to inform risk management practices.
• Provide guidance and expertise to IT teams on risk-related matters, fostering a culture of risk awareness and compliance.
• Design and execute training programs to enhance the organization’s understanding of IT risk management and control measures.
• Collaborate with internal and external auditors
• Develop and maintain KCIs and key KPIs and metrics to measure the effectiveness of risk management efforts.
• Investigate and respond to IT security incidents, coordinating incident response activities and ensuring timely resolution.
• Continuously evaluate and enhance the IT risk management framework

• Bachelor’s degree in Information Technology, Computer Science, or a related field; relevant certifications (e.g., CISA, CISSP) are a plus.
• Proven experience in IT risk management, control, and remediation, with a focus on enterprise-level environments.
• Strong knowledge of industry standards, regulations, and best practices related to IT risk and security.
• Excellent analytical and problem-solving skills with the ability to assess complex IT environments and identify potential risks.
• Effective communication and interpersonal skills to collaborate with diverse teams and convey risk-related information to non-technical stakeholders.
• Experience in developing and delivering training programs on IT risk management and security awareness.

Kraków - hybrid working model: 1 day/week office