Skip to content

IT Risk and Control Specialist

Apply
Apply

Share

successfully icon

Successfully

The vacancy has been successfully added to favorites

location icon

Krakow, Poland

specialization icon

Functional/System Analysis

lob icon

BCM Industry

date icon

12/10/2026

Req. VR-125399

Apply
Project description

Join one of our leading investment banking clients as an IT Risk and Controls Expert. You will play a pivotal role in strengthening the organization's cybersecurity programme by evaluating security controls, identifying and assessing information security (IS) risks, and providing expert guidance to support risk-based decision-making and continuous improvement.

Responsibilities
bullet icon

Cybersecurity: Manage cybersecurity-related activities, including the identification, assessment, and mitigation of information security (IS) risks.

bullet icon

Security Assessments: Conduct security assessments of internal projects and third-party service providers to evaluate control effectiveness and compliance with security requirements.

bullet icon

Security Consulting: Provide security advisory services to stakeholders, offering guidance on security controls, risk treatment options, and policy requirements in business-friendly language.

bullet icon

Project Management: Coordinate and manage security-related projects and initiatives, ensuring timely delivery and alignment with cybersecurity objectives.

bullet icon

Third-Party Risk Management: Drive discussions regarding identified risks, communicate potential business impacts, and provide guidance on appropriate remediation actions.

Skills

Must have

bullet icon

Demonstrable experience in Information Security (IS), Cybersecurity, IT Risk Management, or a related field.

bullet icon

Experience operating within financial services, investment banking, or other regulated environments.

bullet icon

Familiarity with industry frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or COBIT.

bullet icon

Strong understanding of information security principles, risk management methodologies, and control frameworks.

bullet icon

Experience providing security advisory and consulting services to technical and non-technical stakeholders.

bullet icon

Ability to drive risk remediation discussions and influence stakeholders to achieve security objectives.

bullet icon

Proven experience in cybersecurity risk management, security assessments, and control effectiveness reviews.

bullet icon

Strong knowledge of cloud security concepts and cloud-related risk management practices.

bullet icon

Experience assessing third-party service providers and managing associated security risks.

bullet icon

Ability to provide clear, risk-based security advice and influence stakeholders at all organizational levels.

bullet icon

Strong communication skills, with the ability to translate technical findings into actionable business recommendations.

bullet icon

Excellent analytical and problem-solving capabilities, coupled with a practical approach to risk management.

Nice to have

bullet icon

Familiarity with ISO 27001, NIST CSF, CIS Controls, or similar security frameworks.

bullet icon

Knowledge of AWS, Azure, or GCP security capabilities and cloud governance practices.

bullet icon

Relevant certifications such as CISSP, CISM, CRISC, CCSK, or CCSP.

Other
seniority icon

Languages

English: C2 Proficient

seniority icon

Seniority

Senior

Luxoft Benefits*
  • ●Relocation options **
  • ●Experience in an international environment
  • ●Cross-cultural experience
  • ●Feedback culture
  • ●Regular appraisals
  • ●Annual holiday - 20 or 26 days. The duration of the leave depends on the overall seniority
  • ●Occasional leave - 1 or 2 days/ depending on the circumstances
  • ●Child care leave - 2 days or 16 hours per year
  • ●Absence due to force majeure - 2 days or 16 hours per year
  • ●Maternity Leave - 20 weeks
  • ●Parental Leave - 41 weeks
  • ●Paternity Leave - 14 days
  • ●Expert-led tech courses covering basic to advanced topics
  • ●Internal instructor-led soft skills courses
  • ●Comprehensive in-house self-learning resources for both soft and hard skills
  • ●Access to external self-learning libraries like ProQuest eBook and Udemy for Business
  • ●Cloud Programs: MS Cloud Academy, AWS Partner Academy, Google Cloud Academy
  • ●Custom Learning Programs: upskilling, reskilling, technical mentorship
  • ●Leadership Programs for Managers
  • ●Multisport card
  • ●Possibility to order Multisport card at the corporate rate for family members
  • ●LuxGood Program: wellbeing seminars, contests, relaxation sessions, yoga sessions, etc.
  • ●One Team Program: Buddy for each New Joiner; seminars, meeting and workplace space to support integration with local community and culture; “Hire me” workshops for partners
  • ●Preferential banking offer
  • ●Preferential car leasing offer
  • ●Cafeteria program discounts for shops, cinema tickets, holiday offers
  • ●Luxoft Social Benefit Fund: sport and recreation benefits, the possibility to receive financial support
  • ●Private Healthcare Insurance with unlimited access to specialists
  • ●Full dental support
  • ●Travel Insurance
  • ●Possibility to add private healthcare coverage for family members at the corporate rate
  • ●Life insurance at the corporate rate for employees and family members, including payment of the basic package for the employee by the employer
  • ●Reimbursement for corrective glasses
  • ●Many fun social activities organized by the Luxoft team offline in your city
  • ●Online entertainment events for whole company and local team events
  • ●A workplace where you’re treated with respect within a multicultural team
  • ●Rotation between projects and accounts
  • ●New career opportunities

Self-Learning Library

CSR Projects

*The acquisition of rights to the above benefits depends on the form of cooperation. Benefits apply to those employed under a contract of employment.

**Please note that relocation is not available for all open positions. At Luxoft Poland it is possible to work remotely only from the territory of Poland.

***Options offered by the Polish government.

Krakow, Poland

Req. VR-125399

Functional/System Analysis

BCM Industry

12/10/2026

Req. VR-125399

Apply for IT Risk and Control Specialist in Krakow

*Indicates a required field

Under the terms of your specific consent or to perform our obligations under a contract with you, as applicable, we, Luxoft Holding Inc. will manually and electronically process your personal data, specifically your first name, last name, phone number, e-mail address and other data you provide us through this form.


Within this context, we process personal data only for the specific purpose(s) indicated in the individual consent language or other notices provided below.


We will – insofar as reasonably necessary for the purpose you have agreed to and within the scope of applicable laws – transfer your personal data to other entities within the Luxoft Group and to the group of third party recipients listed in our Privacy Notice. Such Recipients can be located outside the European Union (EU) and/or the European Economic Area (EEA) (“Third Countries”). The Third Countries concerned, e.g. the USA, may not have the level of data protection that you enjoy e.g. under the GDPR. This can result in disadvantages such as an impeded enforcement of data subjects’ rights, a lack of control over further processing and access by state authorities. You may only have limited legal remedies against this. Insofar our transfer of your personal data to recipients in Third Countries is not covered by an adequacy decision of the EU Commission, we achieve an adequate level of data protection as further detailed out in our Privacy Notice.


With your consent, we personalise marketing communications to you by way of carrying out marketing research analysis, analysing the surfing-behaviour of our website visitors and to adjust it to their detected tendencies, as well as to plan more efficient future marketing activities. This personalised marketing does not include any automated decision-making activities.


Further information on how we process personal data in general is available in our Privacy Notice. You may withdraw any given consent at any time. The withdrawal of your consent(s) will not affect the lawfulness of processing before its withdrawal. For any request in this context, please e-mail us at: DPO@luxoft.com.


Before uploading CV or any other information to this website, to learn more about your obligations and restrictions arising from the use of this website, please read our Terms of Use.