Senior IT Risk & Audit Compliance Analyst

Responsibilities:

• Conduct IT risk assessments from risk identification through action planning and risk monitoring

• Design and drive audit remediation plans, strategies and audit closure activities

• Collect, document and present audit evidence and technical artefacts

• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions

• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements

• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues

• Establish project plans, governance structures and communication frameworks

• Onboard stakeholders and define working agreements to achieve project objectives

• Report weekly on project progress, impediments and identified risks

• Take proactive actions to ensure timely delivery of agreed outcomes

• Plan and coordinate people and resources against project timelines

• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows

• Support data management and analytics activities using Python

Requirements:

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks

• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations

• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements

• Experience working on large-scale cross-organizational risk, audit or compliance initiatives

• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets

• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management

• Senior to expert knowledge of vulnerability management, security testing and scanning tools

• Strong understanding of security threats, web-based threats and mitigation techniques

• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems

• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis

• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting

• Expert-level experience with SharePoint administration and development, Power Apps and Power Automate

• Mid to senior-level Python skills for data management and analytics

• Excellent organizational, communication and negotiation skills

• Ability to motivate stakeholders and manage expectations

• Proven ability to identify risks, control weaknesses and remediation actions

• Strong analytical skills with proactive problem-solving approach

• Very good command of English, both spoken and written

Nice to have:

• Familiarity with internal risk methods, tools and approaches

• Knowledge of security risk management and governance

• Experience coaching and upskilling junior audit and risk professionals

• Politically sensitive and persuasive communication style

• Trustworthy approach and ability to acknowledge and learn from incorrect decisions

Offer:

• Private medical care

• Co-financing for the sports card

• Constant support of dedicated consultant

• Employee referral program