Security Expert, ICT Regulatory Compliance

Your responsibilities:

• Act as a Group technical authority for ICT regulatory compliance (e.g. DORA, GDPR, PSD2, EBA guidelines).

• Ensure ongoing alignment of the ISMS with legal, regulatory and contractual obligations.

• Perform ICT compliance assessments, control effectiveness reviews and maturity evaluations.

• Identify compliance gaps and prioritise remediation actions in cooperation with IT, Risk and Security SMEs.

• Define, monitor and report compliance KPIs and KRIs at Group and local level.

• Act as Security Business Partner for the local market (Poland) and single point of contact for Information Security.

• Advise senior management on ICT and third party risk, control deficiencies and remediation plans.

• Provide senior oversight of major ICT and cyber incidents, including escalation, regulatory notification and post incident reviews.

• Lead interaction with local regulators and supervisory authorities on security related matters.

• Promote a strong cybersecurity and risk aware culture within the local organisation.

Our requirements:

• Proven experience in ICT security, technology risk and regulatory compliance within financial services.

• Strong knowledge of DORA, GDPR, PSD2, EBA guidelines and ICT risk frameworks.

• Hands on experience with ISMS design, implementation or oversight.

• Ability to interpret regulatory requirements and translate them into practical controls.

• Strong understanding of ICT, cloud, outsourcing and third party risk.

• Experience engaging with senior management, regulators and auditors.

• Very good spoken and written English (additional languages an advantage).

What we can offer:

• Stable employment – 93% of people are employed under an employment contract for an indefinite period.

• Safety – we have been on the Polish market for 29 years.

• Friendly work environment – we have received the Top Employer award 13 times in a row.

• Hybrid work – we usually meet in the office twice a week (Dworzec Gdański metro station).

• Extra 3 days of paid leave – if you use all your leave in a given calendar year.

• Private medical care with appointment guarantee service (Medicover).

• Full implementation under the supervision of a mentor, including a package of professional implementation training.

• Access to the development platform, including e-learning training, podcasts and webinars.

• Activities supporting development in the organization, e.g. the Effective Manager training series for people holding managerial positions.

• Business telephone (also for private use).

• Access to the ProviBenefity cafeteria platform, which is supplied with a monthly amount to be used, or subsidies for your Multisport card - you choose from 5 types of cards.

• Life insurance (UNUM Życie TUiR S.A.) on preferential terms.

• Christmas benefits and co-financing for the Holidays under the pear tree holiday for you and your children.

• Psychological support for employees, including: care of a psychologist (including childrens), psychotherapist, dietician, coaching.