IT Risk & Compliance Specialist

ING Hubs Poland is hiring!

We are looking for you if you:

• have working knowledge of Linux,
• have experience in IT Risk Management and compliance processes,
• can translate IT security requirements into practical implementation,
• have experience with CI/CD tools,
• possess general knowledge of networks, scripting, vulnerability remediation, and monitoring setup,
• communicate fluently in English, both verbally and in writing,
• are a team player who collaborates effectively in an international environment.

You'll get extra points for:

• experience with Oracle DB,
• experience with Azure DevOps,
• experience with SAS 9.4,
• knowledge and experience in Agile frameworks (e.g., Scrum).

Your future responsibilities:

• compliance & risk management,
• collect and register IT Risk-related evidence and ensure timely updates in ITRMP (our platform used to demonstrate compliance with IT Risk Minimum Standards),
• collaborate during internal and external audits by providing required evidence and documentation,
• prepare and maintain risk-related documentation, including Risk Acceptance and MIA reports,
• technical Security & System Management,
• ensure application and system security by: applying security patches to hosts, remediating deviations from security baselines, addressing findings from penetration tests, perform OS and application management tasks, participate in Scrum events and contribute to continuous improvement.

Information about the squad:
Our mission is to provide a stable, secure, and automated platform for analytical purposes such as model development, monitoring, and reporting.
Our platform is already used by multiple ING entities worldwide.
Current technology stack: RHEL, SAS 9.4, Ansible, Oracle, Object Storage, Prometheus, and Azure DevOps-based pipelines.
We value motivation, adaptability, and eagerness to learn in a dynamic, international Agile environment.

The role naming convention in the global ING job architecture will be “Engineer II”.