About this role

Project description

Join one of our leading investment banking clients as an IT Risk and Controls Expert. You will play a pivotal role in strengthening the organization's cybersecurity programme by evaluating security controls, identifying and assessing information security (IS) risks, and providing expert guidance to support risk-based decision-making and continuous improvement.

Responsibilities

Cybersecurity: Manage cybersecurity-related activities, including the identification, assessment, and mitigation of information security (IS) risks.
Security Assessments: Conduct security assessments of internal projects and third-party service providers to evaluate control effectiveness and compliance with security requirements.
Security Consulting: Provide security advisory services to stakeholders, offering guidance on security controls, risk treatment options, and policy requirements in business-friendly language.
Project Management: Coordinate and manage security-related projects and initiatives, ensuring timely delivery and alignment with cybersecurity objectives.
Third-Party Risk Management: Drive discussions regarding identified risks, communicate potential business impacts, and provide guidance on appropriate remediation actions.

Skills

Must have

Demonstrable experience in Information Security (IS), Cybersecurity, IT Risk Management, or a related field.
Experience operating within financial services, investment banking, or other regulated environments.
Familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or COBIT.
Strong understanding of information security principles, risk management methodologies, and control frameworks.
Experience providing security advisory and consulting services to technical and non-technical stakeholders.
Ability to drive risk remediation discussions and influence stakeholders to achieve security objectives.
Proven experience in cybersecurity risk management, security assessments, and control effectiveness reviews.
Strong knowledge of cloud security concepts and cloud-related risk management practices.
Experience assessing third-party service providers and managing associated security risks.
Ability to provide clear, risk-based security advice and influence stakeholders at all organizational levels.
Strong communication skills, with the ability to translate technical findings into actionable business recommendations.
Excellent analytical and problem-solving capabilities, coupled with a practical approach to risk management.

Nice to have

Familiarity with ISO 27001, NIST CSF, CIS Controls, or similar security frameworks.
Knowledge of AWS, Azure, or GCP security capabilities and cloud governance practices.
Relevant certifications such as CISSP, CISM, CRISC, CCSK, or CCSP.

Other

Languages

English: C2 Proficient

Seniority

Senior

Luxoft Benefits*

Relocation options
Experience in an international environment
Cross-cultural experience
Feedback culture
Regular appraisals
Annual holiday - 20 or 26 days. The duration of the leave depends on the overall seniority
Occasional leave - 1 or 2 days/ depending on the circumstances
Child care leave - 2 days or 16 hours per year
Absence due to force majeure - 2 days or 16 hours per year
Maternity Leave - 20 weeks
Parental Leave - 41 weeks
Paternity Leave - 14 days
Expert-led tech courses covering basic to advanced topics
Internal instructor-led soft skills courses
Comprehensive in-house self-learning resources for both soft and hard skills
Access to external self-learning libraries like ProQuest eBook and Udemy for Business
Cloud Programs: MS Cloud Academy, AWS Partner Academy, Google Cloud Academy
Custom Learning Programs: upskilling, reskilling, technical mentorship
Leadership Programs for Managers
Multisport card
Possibility to order Multisport card at the corporate rate for family members
LuxGood Program: wellbeing seminars, contests, relaxation sessions, yoga sessions, etc.
One Team Program: Buddy for each New Joiner; seminars, meeting and workplace space to support integration with local community and culture; “Hire me” workshops for partners
Preferential banking offer
Preferential car leasing offer
Cafeteria program discounts for shops, cinema tickets, holiday offers
Luxoft Social Benefit Fund: sport and recreation benefits, the possibility to receive financial support
Private Healthcare Insurance with unlimited access to specialists
Full dental support
Travel Insurance
Possibility to add private healthcare coverage for family members at the corporate rate
Life insurance at the corporate rate for employees and family members, including payment of the basic package for the employee by the employer
Reimbursement for corrective glasses
Many fun social activities organized by the Luxoft team offline in your city
Online entertainment events for whole company and local team events
A workplace where you’re treated with respect within a multicultural team
Rotation between projects and accounts
New career opportunities

*The acquisition of rights to the above benefits depends on the form of cooperation. Benefits apply to those employed under a contract of employment.

Please note that relocation is not available for all open positions. At Luxoft Poland it is possible to work remotely only from the territory of Poland.

*Options offered by the Polish government.

Krakow, Poland

Req. VR-125399

Functional/System Analysis

BCM Industry

12/10/2026