IT Risk Analyst (M/F/D)
⚲ Warszawa
Do uzgodnienia
Opis stanowiska
Wymagania:
- Experience in IT Risk, Security Governance or Technology Risk
- Hands-on experience with ServiceNow (SNOW) or other GRC tools
- Proven track record in risk reporting (monthly / executive-level)
- Strong ability to translate technical risk into business language
- Knowledge of ISO 27001 / 27002 standards
- Experience in Third-Party Risk Management (TPRM)
- Excellent communication skills in English (min. B2/C1)
- Ability to work with both technical teams and senior stakeholders
- Analytical mindset and confidence in working with data
- Bachelor’s degree in IT, cybersecurity or related field
Mile widziane:
- Experience with executive presentations and storytelling
- Familiarity with IT control environments and audits
- Experience in international or matrix organizations
O firmie:
- DSV is a global leader in the TSL industry, with its headquarters in Denmark. We employ over 160,000 people globally and are present in 90 countries worldwide.
- In Poland, DSV consists of the following 3 operational divisions: DSV Air&Sea, DSV Road, DSV Contract Logistics, DSV Services – internal recruitment agency and Global Business Support – supports business processes.
- DSV Global Business Services (DSV GBS) in Warsaw is in a phase of dynamic development. We employ more than 1500 fantastic people and this number is constantly increasing.
- We provide global services within areas like: Finance & Accounting, Claims, Customs, IT, Process Automation, Customer Reporting & Data Quality, HR & Administration, Back Office.
Zakres obowiązków:
- Conduct IT and security risk assessments (top-down & bottom-up) using ServiceNow (SNOW)
- Ensure risks are properly identified, assessed, documented and maintained throughout their lifecycle
- Validate risk scenarios (impact, likelihood, mitigation plans) with IT and business stakeholders
- Own the monthly risk reporting cycle (data extraction, analysis, storytelling, delivery)
- Prepare executive-ready reports and presentations for senior leadership
- Translate risk data into business impact, trends and priorities
- Analyze risk trends, deviations, controls and third-party exposures
- Identify systemic risks and emerging threats
- Support third-party risk assessments (TPRM) and supplier risk reporting
- Track risk deviations and mitigation actions
- Collaborate with stakeholders across IT and business functions
Oferujemy:
- Employment based on an employment contract, along with a comprehensive benefits package
- Training and development programs, as well as access to an e-learning platform
- Onboarding program with the support of a dedicated Buddy
- Participation in an annual, company-wide integration event
- A work environment based on Scandinavian organizational culture
- Opportunities for growth through our internal program
- Experience in IT Risk, Security Governance or Technology Risk
- Hands-on experience with ServiceNow (SNOW) or other GRC tools
- Proven track record in risk reporting (monthly / executive-level)
- Strong ability to translate technical risk into business language
- Knowledge of ISO 27001 / 27002 standards
- Experience in Third-Party Risk Management (TPRM)
- Excellent communication skills in English (min. B2/C1)
- Ability to work with both technical teams and senior stakeholders
- Analytical mindset and confidence in working with data
- Bachelor’s degree in IT, cybersecurity or related field
Mile widziane:
- Experience with executive presentations and storytelling
- Familiarity with IT control environments and audits
- Experience in international or matrix organizations
O firmie:
- DSV is a global leader in the TSL industry, with its headquarters in Denmark. We employ over 160,000 people globally and are present in 90 countries worldwide.
- In Poland, DSV consists of the following 3 operational divisions: DSV Air&Sea, DSV Road, DSV Contract Logistics, DSV Services – internal recruitment agency and Global Business Support – supports business processes.
- DSV Global Business Services (DSV GBS) in Warsaw is in a phase of dynamic development. We employ more than 1500 fantastic people and this number is constantly increasing.
- We provide global services within areas like: Finance & Accounting, Claims, Customs, IT, Process Automation, Customer Reporting & Data Quality, HR & Administration, Back Office.
Zakres obowiązków:
- Conduct IT and security risk assessments (top-down & bottom-up) using ServiceNow (SNOW)
- Ensure risks are properly identified, assessed, documented and maintained throughout their lifecycle
- Validate risk scenarios (impact, likelihood, mitigation plans) with IT and business stakeholders
- Own the monthly risk reporting cycle (data extraction, analysis, storytelling, delivery)
- Prepare executive-ready reports and presentations for senior leadership
- Translate risk data into business impact, trends and priorities
- Analyze risk trends, deviations, controls and third-party exposures
- Identify systemic risks and emerging threats
- Support third-party risk assessments (TPRM) and supplier risk reporting
- Track risk deviations and mitigation actions
- Collaborate with stakeholders across IT and business functions
Oferujemy:
- Employment based on an employment contract, along with a comprehensive benefits package
- Training and development programs, as well as access to an e-learning platform
- Onboarding program with the support of a dedicated Buddy
- Participation in an annual, company-wide integration event
- A work environment based on Scandinavian organizational culture
- Opportunities for growth through our internal program
🔍 Dekoder Ogłoszenia
🔴
Strong ability to translate technical risk into business language
Oczekuje się, że będziesz potrafił wyjaśniać złożone problemy techniczne w sposób zrozumiały dla osób nietechnicznych, co może oznaczać konieczność częstego komunikowania się z zarządem.
🔴
Ability to work with both technical teams and senior stakeholders
Będziesz musiał balansować między potrzebami zespołów technicznych a oczekiwaniami kierownictwa, co może wymagać umiejętności negocjacji i zarządzania konfliktami.
🔴
Proven track record in risk reporting (monthly / executive-level)
Oczekuje się regularnego tworzenia raportów, które będą zrozumiałe i użyteczne dla kadry zarządzającej, co może oznaczać dużą odpowiedzialność i presję czasu.
🟡
DSV Global Business Services (DSV GBS) in Warsaw is in a phase of dynamic development.
Firma szybko rośnie, co może oznaczać częste zmiany w strukturze, procesach i rolach, ale też potencjalne możliwości rozwoju.
🟢
Experience with executive presentations and storytelling
Umiejętność prezentowania danych w angażujący sposób jest kluczowa, co sugeruje, że Twoja praca będzie często widoczna na wyższych szczeblach organizacji.