All offersWarsawAnalyticsIT Governance Risk and Compliance Senior Analyst
IT Governance Risk and Compliance Senior Analyst
eService Sp. z o.o.

IT Governance Risk and Compliance Senior Analyst

eService Sp. z o.o.
Type of work
Employment Type
Operating mode

Tech stack

    Risk Management

Job description

Online interview
Friendly offer

eService jest liderem rynku akceptacji kart płatniczych i rozliczania transakcji elektronicznych w Polsce, a także największym dostawcą technologii w zakresie usług rozliczeniowych w Europie Środkowo-Wschodniej. Firma działa na rynku od prawie 25 lat i oferuje przedsiębiorcom omnichannelowe rozwiązania płatnicze zarówno dla stacjonarnych i mobilnych punktów usługowo-handlowych, jak i działalności online. W ofercie ma terminale POS i bramki płatnicze dla rozwiązań e-commerce i m-commerce. Firma wspiera promocję płatności bezgotówkowych w małych i średnich przedsiębiorstwach, a także w jednostkach samorządu terytorialnego i instytucjach publicznych.

eService należy do Global Payments Inc. (NYSE: GPN) i PKO Banku Polskiego. Global Payments z siedzibą w Atlancie w stanie Georgia, zatrudnia około 27 000 pracowników na całym świecie, jest spółką z listy Fortune 500® i członkiem S&P 500. Prowadzi działalność o światowym zasięgu obejmującym Amerykę Północną, Europę, Azję i Pacyfik oraz Amerykę Łacińską. 

IT Governance Risk and Compliance Senior Analyst


About the role:

Under the supervision of the Director of IT GRC, the IT GRC Specialist evaluates company wide IT Internal

Controls, technical risk and security assurance practices. The IT GRC Specialist assists the Director in building and fortifying internal and IT risk controls, developing and strengthening risk and compliance programs and improving the capabilities during PCI, PII, PCI-PIN, SSAE18, Sarbanes Oxley, financial system audits and any other regulatory and statutory requirements.       

Be a part of a team where you will:


Evaluate and provide reasonable assurance that IT risk management, control, and governance systems are functioning as intended and will enable objectives and goals. 

Report risk and compliance issues and identified internal controls deficiencies to the IT leadership team.

Evaluate information security and associated risk exposures.

Maintain open communication with the IT leadership team.

As needed, provide support to the company’s anti-fraud and associated compliance programs.

Work with internal users to meet scheduled compliance requirements.

Work with internal technical and business teams to manage external and internal audit processes.

Assist in performing internal IT audits.

Coordinate evidence gathering with IT staff for internal and external audits. 

What you need to be successful:

Bachelor’s degree in Information Technology / Information Security /Accounting / Finance or Engineering.

3 - 5 years IT auditing, internal control, process design or implementation experience.

3+ years working experience in IT Information Security.

Working knowledge of Microsoft Server or Linux.

Experience using iTGRC software tools such as RSA Archer or ZenGRC.

Obtained or demonstrates an active pursuit of one or more of the following certifications: CIA, CISSP, CISM,

CISA or other related certifications.

Experience in performing PCI-DSS, Sarbanes Oxley or SOC1-SSAE-18 audits.

Familiarity with security frameworks such as the NISTCybersecurity Framework and ISO-27001

Ability to maintain confidentiality and work independently, but with a team focus. 

Effective communications and interpersonal skills.

A strong customer service focus and meticulous attention to detail.

Ability to manage multiple priorities in a fast paced environment.

Strong understanding of audit standards and best practices.

Strong analytical and organizational skills.

Ability to establish priorities, work collaboratively, and meet objectives.

Strong collaborative and influencing skills.

Must be able to pass background, drug and credit checks.

Ability to travel domestically and international.

Must be able to work flexible hours, including hours beyond the normal schedule, when necessary.

Ability to define problems, collect data, establish facts, and draw valid conclusions

What will you get from us:     

•      Employment contract with the prospect of long-term cooperation

•      Tools necessary for work

•      Onboarding, training for employees: with us you will develop your professional and personal potential

•      Luxmed private medical care for you and your family members (including dentistry)

•      Access to Multisport card

•      Possibility of joining group life insurance

•      Free learning English and German (on-line)

•      Lunch card

•      Access to a free and anonymous employee support program in the field of psychological, financial and legal counselling


What's next:

•      send your resume

•      telephone interview - short talk about the position and your experience (15 min)

•      recruitment meeting - we will get to know each other, you will learn more about eService, meet your manager and we’ll talk more broadly about your experience (60 min)

employment offer - after a successful recruitment process we will ma