Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Agile @ 3
Audit @ 3
Communication @ 6
Compliance @ 3
DevOps @ 3
Project Management @ 3
Security @ 3
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
ING Hubs Poland is hiring an IT Risk & Compliance Engineer to serve as a central point of contact for IT control execution, audit coordination, and compliance governance across an Agile-driven technology landscape. The role involves close collaboration with DevOps squads, IT custodians, asset owners, and risk stakeholders to ensure operational control health, accurate evidence management, and alignment with SOX, ITGC, DORA, and internal risk frameworks.
The role naming convention in the global ING job architecture is Engineer II.
Responsibilities
- Coordinate IT risk control execution and act as the single point of contact for audits and evidence submission.
- Monitor control performance, risk indicators, and execution timelines, escalating delays when needed.
- Identify, assess, and manage IT risks across systems and processes.
- Ensure compliance with internal frameworks and regulations, including SOX, ITGC, and DORA.
- Support SOX and ITGC audits and coordinate evidence collection with stakeholders.
- Drive automation of manual controls and improve the efficiency of risk processes.
- Collaborate with DevOps, engineering, and business teams to embed risk and security controls.
- Translate technical topics into clear risk and control documentation.
- Develop dashboards and reports to provide visibility into risk and control performance.
- Work in Agile/Scrum environments and support multiple workstreams.
Requirements
- Experience in IT risk, IT security, IT compliance, IT controls, or IT audit.
- Strong understanding of risk frameworks and regulatory requirements.
- Experience working with IT, engineering, and risk stakeholders.
- Strong analytical and communication skills, with the ability to challenge and influence.
- Experience in Agile and DevOps environments.
- Ability to manage multiple priorities.
- English proficiency at B2/C1 level.
Additional Qualifications
- Experience in audit, control testing, or compliance validation.
- Familiarity with cloud, infrastructure, or DevOps practices.
- Experience with automation, scripting, or risk tooling.
- Experience in financial services.
- ISC2 Cyber Security certification.
- Project Management Professional (PMP) certification.
- White/Blue Security Champion ING certifications.
Work Arrangement
The role is offered in a hybrid mode and is full time.
More jobs at ING
Workday Integration Expert
ING · Warsaw, Poland
PLN 207,600-288,000 per year
Wholesale Banking Model Data Analyst Expert
ING · Warsaw, Poland
PLN 156,000-264,000 per year
Senior Java Software Engineer
ING · Katowice, Poland
PLN 115,200-264,000 per year
Senior IT Engineer – Contractor
ING · New York City, United States
USD 79-102 per hour
Azure Cloud Engineer
ING · Katowice, Poland
PLN 85,200-156,000 per year
Similar jobs
Senior Manager, IT SOX
Anthropic · San Francisco, United States
USD 230,000-300,000 per year
Senior Internal Auditor, Technology
GitLab · Canada, United States
USD 86,400-146,400 per year
Staff Software Engineer, Identity & Access Management
Reddit · United States
USD 217,000-303,900 per year
DevOps Engineer – SAS Viya
ING · Katowice, Poland
PLN 115,200-252,000 per year
Staff Workday Integration Engineer, Tech Foundations
Airbnb · United States
USD 180,000-225,000 per year
Sr. Security Engineer - GRC Fintech & Financial Services
SpaceXAI · Washington, United States, New York City, United States, Palo Alto, United States
USD 152,000-258,000 per year
CRO - AI Risk Governance & Operations Lead
Bloomberg · New York City, United States
USD 185,000-245,000 per year
Senior Security Engineer - GRC Frameworks & AI Governance
SpaceXAI · Washington, United States, New York City, United States, Palo Alto, United States
USD 152,000-258,000 per year