Position: Control Design Analyst
Company: Luxoft
Category: Security
Experience required: 5y
English level: upper

We are looking for Control Design Analyst in Poland. Ready to relocate you

Project Description:
Whilst the job holder will be based in Krakow, Poland, this is a Global role covering Global Cybersecurity Controls applicable to all countries and legal entities

Cybersecurity Controls Design Analyst will support continuous maintenance and development of the Cybersecurity control environment. The role holder will be tasked with support of defining and maintaining operational controls instances and their attributes, control measurements as well as control requirements for Group Cybersecurity.

Responsibilities:
• Engage with variety of stakeholders (including but not limited to: Control Owners and 2LoD) to ensure that the Cybersecurity owned controls in the Risk and Controls Library are designed according to the Bank's requirements and industry standards and best practices (e.g. NIST 800-53);
• Work with stakeholders and peers to ensure that Cybersecurity control measurements are defined in accordance with Banks's KCI Design Framework and industry best practices (e.g. CIS);
• Work with Cybersecurity teams to ensure that the defined controls are compliant with Legal/Regulatory requirements and that control measurements provide sufficient insights for management reports;
• Maintain and regularly review Cybersecurity control requirements and supportive documents.
• Align Cybersecurity control requirements to industry best practices and regulatory expectations.

Mandatory Skills Description:
• Experience with risk and control frameworks
o Expertise in Control Management. This includes but is not limited to controls design, implementation, further assessments or testing;
o Solid understanding of the Inherent/Residual risk concepts
o Ability to translate difficult IT concepts into business-friendly language;
o Experience with Technology risks and controls.
• Technical background
o Knowledge of Cybersecurity - at least a generalist with specialist area expertise welcome.
o Understanding of metrics and measures in managing risks and controls (KCIs, KRIs, KPIs) is a must;
o Good writing skills and proficient use of written English.
o Experience with MS Office and MS Teams
• Stakeholder management and communications skills
o Experience of working in international environment;
o Managing stakeholders including Cybersecurity Leadership and staff, Chief Controls Office and 2LoD Resilience Risk teams.
• Team-oriented mentality combined with ability to complete tasks independently to a high quality standard
o Experience within fast-moving, complex and demanding corporate environments where Cybersecurity controls issues have to be handled on a large scale and with a need to multi-task whilst dealing with ambiguity and change.
• Interpersonal Skills
o Influential, credible and persuasive, active listener, embraces Banks Values, shows good judgement and demonstrating high level of communication skills in order to achieve effective stakeholders engagement.

Nice-to-Have Skills:
• Familiarity with the NIST 800-53 would be beneficial;
• Familiarity with Centre for Internet Security (CIS) Measures and Metrics is a plus;
• Experience with GRC Tools is a plus;
• Industry certification in Risk/Technology/Security is a plus.