IT Risk Analyst, Krakow, Poland

Division

Risk Management - Technology & Cyber Risk

Role Purpose

Risk Management division forms part of Euroclear's second line (of defense) and its mission is to support Euroclear in achieving its goals and delivering its strategy through providing robust, independent oversight of risk-taking activities across the Group.

Key Responsibilities

Required Qualifications

Soft Skills

The IT Risk Analyst supports the Risk Management division by being involved in identifying, assessing, and monitoring IT risks across the organization. This role is responsible for ensuring that IT risk management policies, procedures, and controls are effectively implemented and maintained, in line with internal standards and regulatory requirements.

• Participate in the evaluation, testing, and recommending IT risk management policies, procedures, and systems (hardware, firmware, software);
• Supporting the review of the IT architecture, designs, plans, controls, and standards to ensure alignment with risk management objectives;
• Participate in identification of IT risks and exposures, investigation of incidents causes, and proposing procedures to prevent recurrence;
• Participate in the investigation of IT risk incidents, and recommend enhancements to improve risk posture;
• Support the development and application of techniques for conducting IT risk assessments and compliance audits;
• Support the evaluation and testing of IT systems for potential risk impacts;
• Facilitate guidance and direction within IT and to business users regarding IT risk management and protection of information assets;
• Maintain up-to-date knowledge of relevant IT risk standards, frameworks, and regulatory requirements.

• Master's degree in Computer Science, Information Technology, Risk Management, or a related field (or equivalent experience);
• At least 3+ years of experience containing relevant aspects with IT risk management, IT audit, or a similar area;
• Familiarity with IT risk management standards (e.g., COBIT, ISO 31000, NIST).
• Analytical and problem-solving skills;
• Good written and verbal communication skills in English;

• Attention to detail and a methodical approach to problem-solving;
• Ability to work collaboratively within a team and communicate effectively with both technical and non-technical stakeholders;
• Eagerness to learn and develop new skills in IT risk management;
• Ability to manage time and priorities effectively, especially when handling multiple tasks or deadlines. #LI-CM1