QA and SDLC Control Analyst

O projekcie:
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe. 

Join our client’s team as a QA and SDLC Control Analyst

Are you passionate about cybersecurity governance, control compliance, and enabling secure software delivery? We are looking for a Control Analyst to support SDLC and Deployment Control processes and ensure compliance across global cybersecurity engineering teams.

Sounds like your kind of challenge? 

#LI- Hybrid – 6 days a month from the office in Kraków

What you get in return

- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – 6 days a month from the office in Kraków
- Collaborative team culture – work alongside experienced professionals eager to share knowledge 
- Continuous development – access to training platforms and growth opportunities 
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more 
- High quality equipment – laptop and essential software provided

Wymagania:
- Experience & Skills:

- Minimum 3+ years as a Business Analyst / Test Analyst in Agile development environments.
- Familiarity with SDLC best practices and test evidence compliance.
- Experience using QA tools (qTest, Tricentis, Zephyr).
- Proficiency in Microsoft Office Suite (Excel, Visio, PowerPoint) for data analysis and reporting.
- Good knowledge of Governance, Risk, and Compliance (GRC) processes.
- Strong communication skills with the ability to run workshops and stakeholder sessions independently.

- Preferred:

- IIBA certifications (ECBA, CCBA, CBAP).
- Knowledge of vulnerability scanning tools (SAST, DAST, MAST) and application security practices.
- Familiarity with Agile methodologies (SAFe, Scrum).
- SQL and cloud experience (GCP, AWS, Azure).
- Experience delivering process flow diagrams and improvement initiatives.

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Codzienne zadania:
- Define best practices and compliance benchmarks for SDLC and Deployment (DEPL) controls across cybersecurity projects.
- Manage the spot-check process and compliance reviews for cyber delivery teams to identify deficiencies.
- Deliver training and guidance on SDLC/Deployment controls for engineers, fostering consistent compliance.
- Monitor and report control compliance status and DevOps metrics to stakeholders.
- Drive workshops, communicate expectations, resolve issues, and manage decision-making sessions with stakeholders across delivery, control, and governance teams.
- Support the adoption of processes associated with agile software development and DevOps.
- Provide process improvement recommendations and create clear, effective workflows.