IT Risk and Controls Expert

IT Risk and Controls Expert

Project description

Join one of our leading investment banking clients as an IT Risk and Controls Expert. You will play a pivotal role in strengthening the organization's cybersecurity programme by evaluating security controls, identifying and assessing information security (IS) risks, and providing expert guidance to support risk-based decision-making and continuous improvement.

Responsibilities

• Cybersecurity: Manage cybersecurity-related activities, including the identification, assessment, and mitigation of information security (IS) risks.
• Security Assessments: Conduct security assessments of internal projects and third-party service providers to evaluate control effectiveness and compliance with security requirements.
• Security Consulting: Provide security advisory services to stakeholders, offering guidance on security controls, risk treatment options, and policy requirements in business-friendly language.
• Project Management: Coordinate and manage security-related projects and initiatives, ensuring timely delivery and alignment with cybersecurity objectives.
• Third-Party Risk Management: Drive discussions regarding identified risks, communicate potential business impacts, and provide guidance on appropriate remediation actions.

Skills

• Must have

• Demonstrable experience in Information Security (IS), Cybersecurity, IT Risk Management, or a related field.

• Experience operating within financial services, investment banking, or other regulated environments.

• Familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or COBIT.

• Strong understanding of information security principles, risk management methodologies, and control frameworks.

• Experience providing security advisory and consulting services to technical and non-technical stakeholders.

• Ability to drive risk remediation discussions and influence stakeholders to achieve security objectives.

• Proven experience in cybersecurity risk management, security assessments, and control effectiveness reviews.

• Strong knowledge of cloud security concepts and cloud-related risk management practices.

• Experience assessing third-party service providers and managing associated security risks.

• Ability to provide clear, risk-based security advice and influence stakeholders at all organizational levels.

• Strong communication skills, with the ability to translate technical findings into actionable business recommendations.

• Excellent analytical and problem-solving capabilities, coupled with a practical approach to risk management.

• Nice to have

• Familiarity with ISO 27001, NIST CSF, CIS Controls, or similar security frameworks.

• Knowledge of AWS, Azure, or GCP security capabilities and cloud governance practices.

• Relevant certifications such as CISSP, CISM, CRISC, CCSK, or CCSP.

• Other

• Languages

• English: C2 Proficient

• Seniority

• Senior

• Luxoft Benefits

• Relocation options

• Experience in an international environment

• Cross-cultural experience

• Feedback culture

• Regular appraisals

• Annual holiday - 20 or 26 days. The duration of the leave depends on the overall seniority

• Occasional leave - 1 or 2 days/ depending on the circumstances

• Child care leave - 2 days or 16 hours per year

• Absence due to force majeure - 2 days or 16 hours per year

• Maternity Leave - 20 weeks

• Parental Leave - 41 weeks

• Paternity Leave - 14 days

• Expert-led tech courses covering basic to advanced topics

• Internal instructor-led soft skills courses

• Comprehensive in-house self-learning resources for both soft and hard skills

• Access to external self-learning libraries like ProQuest eBook and Udemy for Business

• Cloud Programs: MS Cloud Academy, AWS Partner Academy, Google Cloud Academy

• Custom Learning Programs: upskilling, reskilling, technical mentorship

• Leadership Programs for Managers

• Multisport card

• Possibility to order Multisport card at the corporate rate for family members

• LuxGood Program: wellbeing seminars, contests, relaxation sessions, yoga sessions, etc.

• One Team Program: Buddy for each New Joiner; seminars, meeting and workplace space to support integration with local community and culture; “Hire me” workshops for partners

• Preferential banking offer

• Preferential car leasing offer

• Cafeteria program discounts for shops, cinema tickets, holiday offers

• Luxoft Social Benefit Fund: sport and recreation benefits, the possibility to receive financial support

• Private Healthcare Insurance with unlimited access to specialists

• Full dental support

• Travel Insurance

• Possibility to add private healthcare coverage for family members at the corporate rate

• Life insurance at the corporate rate for employees and family members, including payment of the basic package for the employee by the employer

• Reimbursement for corrective glasses

• Many fun social activities organized by the Luxoft team offline in your city

• Online entertainment events for whole company and local team events

• A workplace where you’re treated with respect within a multicultural team

• Rotation between projects and accounts

• New career opportunities

• The acquisition of rights to the above benefits depends on the form of cooperation. Benefits apply to those employed under a contract of employment.

• Please note that relocation is not available for all open positions. At Luxoft Poland it is possible to work remotely only from the territory of Poland.

• Wroclaw, Poland

• Req. VR-125399

• Functional/System Analysis

• BCM Industry

• 12/10/2026

• Req. VR-125399