IT Risk & Compliance Senior Manager

Your New Role... 

We are looking for an experienced IT Risk & Compliance Manager to lead and strengthen our organisation’s risk management and compliance framework. This role plays a critical part in ensuring the reliability, security, and regulatory compliance of our IT landscape.

You will work closely with senior technology leaders and cross-functional teams to proactively manage risk, build robust controls, and support the safe delivery of business-critical systems and projects.

What's in in for you...

• Contract of employment

• Benefits package: private medical care, life and accident insurance, MyBenefit cafeteria platform, sports card, social fund, retirement pension plan, Employee Referral Program

• Free access to the HBO Max platform

• Work-life balance initiatives: well-being platform, yoga, massages, educational webinars, Employee Support Program, film screenings organized by employees in the office cinema

• Training and development: training platform, co-financing of English lessons, Employee Resource Groups, Engagement Club - the opportunity to develop your interests in thematic employee groups, online meetings with experts

• CSR activities: volunteering, ecological and social initiatives

• Access to parking spaces

Your Role Accountabilities...

• IT Risk Management Oversight: Proactively identify, assess, and mitigate risks across all IT systems, operations, and project lifecycles.

• SOX & ITIL Alignment: Map ITIL processes and SOX controls to global governance standards, prioritizing automated controls to increase efficiency.

• Control Activities: Plan, execute, and monitor periodic control activities to maintain compliance.

• Risk Assessment Frameworks: Implement best-practice risk assessment strategies.

• Project & Product Support: Guide product teams in integrating compliance requirements early in the development lifecycle.

• Continuous Improvement: Drive refinement of compliance frameworks and risk management processes.

• Business Continuity: Ensure minimal disruption to critical IT services and business operations.

• Disaster Recovery Plan (DRP):

• Identify Vulnerabilities: Pinpoint potential system weaknesses.

• Prioritize Recovery: Assess risks and establish recovery strategies (RTO/RPO).

• Test and Maintain: Develop, document, and regularly test DR plans to ensure resilience.

• Coordinate: Lead cross-departmental efforts for a unified response.

• Innovate: Integrate new technologies (e.g., AI in monitoring) into recovery systems.

• Team Leadership: Lead, mentor, and develop the Risk & Compliance team

Qualifications & Experience...

• Proven experience in IT Risk, Audit, Compliance, or IT Governance

• Strong knowledge of ITIL processes and SOX controls

• Experience in managing risk within complex IT environments

• Leadership experience (team management or project leadership)

• Strong stakeholder management skills and ability to work across functions

• Strategic mindset combined with hands-on execution capability

• Excellent analytical and problem-solving skills

• Fluency in both English and Polish (written and spoken) is required

Nice to Have

• Experience in international / matrix organisations

• Familiarity with governance frameworks (COBIT, ISO, etc.)

• Background in media, digital, or large-scale technology environments