{"id":4249914,"url":"https://alion.io/job/luxoft-it-risk-and-control-specialist","title":"IT Risk and Control Specialist","company":{"id":171185,"name":"Luxoft","domain":"luxoft.com","url":"https://alion.io/company/luxoft","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career sitemap","truth_index":{"grade":"A","score":91,"open_postings":11,"ghost_share":0,"stale_share":0.455,"repost_share":0.182,"time_to_fill_p50_days":21,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Support","role_family":"Support","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-11-13T08:05:12Z","employer_posted_date":null,"last_verified_at":"2026-11-13T08:05:12Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Join one of our leading investment banking clients as an IT Risk and Controls Expert. You will play a pivotal role in strengthening the organization's cybersecurity programme by evaluating security controls, identifying and assessing information security (IS) risks, and providing expert guidance to support risk-based decision-making and continuous improvement.\n\nCybersecurity: Manage cybersecurity-related activities, including the identification, assessment, and mitigation of information security (IS) risks.\n\nSecurity Assessments: Conduct security assessments of internal projects and third-party service providers to evaluate control effectiveness and compliance with security requirements.\n\nSecurity Consulting: Provide security advisory services to stakeholders, offering guidance on security controls, risk treatment options, and policy requirements in business-friendly language.\n\nProject Management: Coordinate and manage security-related projects and initiatives, ensuring timely delivery and alignment with cybersecurity objectives.\n\nThird-Party Risk Management: Drive discussions regarding identified risks, communicate potential business impacts, and provide guidance on appropriate remediation actions.\nWymagania\nMUST Demonstrable experience in Information Security (IS), Cybersecurity, IT Risk Management, or a related field.\n\nExperience operating within financial services, investment banking, or other regulated environments.\n\nFamiliarity with industry frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, or COBIT.\n\nStrong understanding of information security principles, risk management methodologies, and control frameworks.\n\nExperience providing security advisory and consulting services to technical and non-technical stakeholders.\n\nAbility to drive risk remediation discussions and influence stakeholders to achieve security objectives.\n\nProven experience in cybersecurity risk management, security assessments, and control effectiveness reviews.\n\nStrong knowledge of cloud security concepts and cloud-related risk management practices.\n\nExperience assessing third-party service providers and managing associated security risks.\n\nAbility to provide clear, risk-based security advice and influence stakeholders at all organizational levels.\n\nStrong communication skills, with the ability to translate technical findings into actionable business recommendations.\n\nExcellent analytical and problem-solving capabilities, coupled with a practical approach to risk management.\n\nNICE TO HAVE Familiarity with ISO 27001, NIST CSF, CIS Controls, or similar security frameworks.\n\nKnowledge of AWS, Azure, or GCP security capabilities and cloud governance practices.\n\nRelevant certifications such as CISSP, CISM, CRISC, CCSK, or CCSP.","description_format":"text","description_chars":2764,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-13T13:52:50Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":0,"expected_fill_days":21,"reasons":["seen:0","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/luxoft-it-risk-and-control-specialist","json_url":"https://alion.io/job/luxoft-it-risk-and-control-specialist.json","meta":{"generated_at":"2026-11-15T01:01:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1853,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":171185},"rest":"https://alion.io/mcp/rest/get_company?id=171185"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fluxoft-it-risk-and-control-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fluxoft-it-risk-and-control-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fluxoft-it-risk-and-control-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/luxoft-it-risk-and-control-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fluxoft-it-risk-and-control-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4249914}},{"tool":"search_jobs","arguments":{"company":"luxoft.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4249914},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}