IT Risk & Compliance Advisor​ | f/m/d

About Us

ERGO Technology & Services S.A. (ET&S), a member of the Munich Re and ERGO Group, is delivering integrated IT and business services to international markets. Our expertise lies in providing advanced IT services, with a focus on modern, business-driven technology solutions. On the business side, we also support the Group in various end-to-end insurance processes, including finance, operations, and underwriting. With offices in Warsaw and Gdansk, and strong global partnerships, we foster a dynamic, multicultural environment that promotes diversity and international opportunities.

About the role

As an IT Risk & Compliance Advisor, you will work at the intersection of information technology, audit, and regulation. You will coordinate IT audits, engage with senior stakeholders, and support compliance activities across an international and highly regulated environment. You will work closely with global IT Risk & Compliance teams, auditors, regulators, and senior management across multiple locations. We are looking for a collaborative team player who is able to build trusted relationships across organizational boundaries and communicate effectively with both technical experts and senior executives. Success in this role requires excellent communication skills, sound judgment, and the ability to remain effective in situations involving multiple stakeholders, competing priorities, and tight timelines.

How you will get the job done

• serving as the central point of contact for internal and external IT audits, IT-related regulatory questionnaires and inspections
• supporting the end-to-end coordination of IT audits; this includes, but is not limited to, coordination with relevant stakeholders during the audit phases preparation, fieldwork (especially supporting delivery of evidence), reporting, and follow-up & monitoring
• supporting discussions with auditors and regulators, especially helping to ensure that IT audit conclusions accurately reflect the underlying facts and controls
• tracking and monitoring of IT audit-related measures, including maintenance and continuous enhancement of the IT audits register and the IT measures register
• preparing and supporting reporting to relevant stakeholders, especially senior stakeholders and executive management, as well as Service Review Meetings, this includes the coordination of required inputs, documentation of outcomes, tracking of follow-up actions, and presentation of relevant content during meetings
• fostering global collaboration and knowledge sharing among IT Risk & Compliance teams

Skills and experience you will need

• fluency in English
• university degree in Computer Engineering/IT, Business Administration, or a related field
• 5+ years IT Audit experience in financial services, insurance, banking, or another highly regulated industry
• experience in performing IT audits against regulatory requirements and industry standards
• proficient in financial services-relevant regulations, especially DORA
• 2+ years of experience working with senior stakeholders and executive management
• excellent communication skills and sound judgment
• ability to remain effective in situations involving multiple stakeholders and competing priorities
• ability to oversee and handle multiple requests
• calmness and clarity of thought under pressure
• ability to maintain confidentiality
• willing to undertake occasional global travel

Nice to have

• German language proficiency
• relevant certifications, such as Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or similar
• Big 4 Consulting/Assurance/Audit experience
• awareness of industry trends on regulatory compliance, emerging threats, and technologies to understand the risk and safeguard the company better
• managing relevant business and partner relationships
• ability to clearly and engagingly document and present content
• project management expertise in planning, coordinating, and executing the company’s internal audit organization during external/regulatory audits