Senior IT Risk & Audit Compliance Analyst

Responsibilities

• Conduct IT risk assessments from risk identification through action planning and risk monitoring.
• Design and drive audit remediation plans, strategies and audit closure activities.
• Collect, document and present audit evidence and technical artefacts.
• Communicate risks, remediation plans, priorities, effort estimates and outcomes to senior leadership and control functions.
• Support compliance activities related to NIS2, DORA, FSA guidelines and ECB requirements.
• Coordinate remediation and closure of large-scale cross-organizational audit and compliance issues.
• Establish project plans, governance structures and communication frameworks.
• Onboard stakeholders and define working agreements to achieve project objectives.
• Report weekly on project progress, impediments and identified risks.
• Take proactive actions to ensure timely delivery of agreed outcomes.
• Plan and coordinate people and resources against project timelines.
• Design, develop and maintain SharePoint lists, Power Apps solutions and Power Automate flows.
• Support data management and analytics activities using Python.

Requirements

• Strong experience in IT risk assessments, risk monitoring and risk management frameworks.
• Proven experience in audit management, remediation planning, evidence collection, audit closure delivery and audit negotiations.
• Knowledge of compliance requirements including NIS2, DORA, FSA guidelines and ECB requirements.
• Experience working on large-scale cross-organizational risk, audit or compliance initiatives.
• Expert knowledge of DNS, TCP/IP, network architecture, cloud networking and internet-based assets.
• Senior to expert knowledge of database technologies including Oracle, DB2, MSSQL and PostgreSQL, with focus on architecture, security, compliance, user management, backup strategies, authentication, patch and version management.
• Senior to expert knowledge of vulnerability management, security testing and scanning tools.
• Strong understanding of security threats, web-based threats and mitigation techniques.
• Working knowledge of infrastructure operations, incident management, problem management and CMDB systems.
• Knowledge of banking applications, banking technologies, business continuity, business impact analysis and business analysis.
• Proven experience creating project plans, governance models, stakeholder management processes and progress reporting.
• Expert-level experience with SharePoint administration and development, Power Apps and Power Automate.
• Mid to senior-level Python skills for data management and analytics.
• Excellent organizational, communication and negotiation skills.
• Ability to motivate stakeholders and manage expectations.
• Proven ability to identify risks, control weaknesses and remediation actions.
• Strong analytical skills with a proactive problem-solving approach.
• Very good command of English, both spoken and written.

Nice to have

• Familiarity with internal risk methods, tools and approaches.
• Knowledge of security risk management and governance.
• Experience coaching and upskilling junior audit and risk professionals.
• Politically sensitive and persuasive communication style.
• Trustworthy approach and ability to acknowledge and learn from incorrect decisions.

Offer

• Private medical care.
• Co-financing for the sports card.
• Constant support of a dedicated consultant.
• Employee referral program.