Risk Management Specialist

Our mission is to help people integrate technology into everyday life and to enable innovation through technology. We offer software development and infrastructure solutions, with advanced competences in Blockchain, Artificial Intelligence and Machine Learning. All our offices (in Western Europe or nearshore, in CEE) are located within the boundaries of the European Union. We believe working in close cooperation with our clients and employees is the key to success; this means we offer people the best working environment in order to achieve the best results. We love entrepreneurial spirits and encourage people around us to be proactive and make the best decisions not only for business, but for their own personal development. Our nearshore Romanian offices are in Bucharest (Victoriei Square) and Iasi (Palace) and, with over 9000 team members at group level, we make sure we are always close to our customers.

Role Overview:

The Cyber Risk Analyst will play a pivotal role in safeguarding our AI/ML and GenAI

systems by conducting thorough risk assessments, developing robust security

protocols, and collaborating with cross-functional teams to integrate security measures

throughout the development lifecycle.

This role requires engaging with senior technical stakeholders (developers, engineers,

managers, etc.) to identify appropriate risk responses, and supporting and maintaining

a fit-for-purpose IT and cybersecurity controls framework, including the development of

additional IT controls to manage risks

Key Responsibilities:

• Be a “subject matter expert” in different IT risk and cybersecurity related domains.
• Apply knowledge of cybersecurity and IT controls, systems and process landscape to enable clear understanding of impact and lead Initiative affecting wider organizations.
• Conduct Risk Assessments: Perform comprehensive risk assessments for AI/ML and GenAI projects to identify potential security vulnerabilities and threats.
• Collaborate with ML Engineers, Developers and Data Scientists: Work closely with data scientists and AI/ML engineers to understand the data flows, algorithms, and models, ensuring security measures are integrated throughout the development lifecycle.
• Evaluate Third-Party Tools: Assess the security of third-party AI/ML tools and platforms, ensuring they meet organizational security standards and compliance requirements.
• Documentation and Reporting: Maintain detailed documentation of risk assessments, security measures, and incident reports, and provide regular updates to senior management and relevant stakeholders.
• Stay Updated on Emerging Threats: Keep abreast of the latest cybersecurity threats, trends, and technologies related to AI/ML and GenAI, and proactively update security strategies accordingly.
• Support stakeholders with cybersecurity or regulatory compliance related risk expertise and knowledge. Responsible for identifying technology risks and proposing control design.
• Provide advice on control design that is both sustainable and right sized (i.e. a simple solution for a simple problem, no overengineering).
• Support with operational activities related to cybersecurity risk management.
• Includes supporting cyber risk assessments, security policy exceptions, and assessing issues from a cyber risk perspective
• Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, Business continuity teams, IT Disaster recovery and Service continuity team etc.) as needed
• Stay flexible to meet the dynamic business needs, while maintaining robust solutions that strengthen the control environment. Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com.
• Be able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time.

Requirements:

• Solid technical knowledge of enterprise technology infrastructure, including cloud platforms, big data technologies, AI systems, etc.
• Knowledge of AI/ML and GenAI technologies, Large Language Models (LLMs), algorithms, and data processing techniques, including their development and deployment processes.
• Threat Landscape: Awareness of the latest cybersecurity threats, trends, and emerging technologies related to AI/ML and GenAI.
• Regulatory and Compliance Standards: Knowledge of industry standards and regulatory requirements relevant to AI/ML and GenAI initiatives. Knowledge of relevant regulations and standards such as SOX, DMA/DSA, EU AI Act, GDPR and CCPA.3
• Solid understanding of cybersecurity risks and data protection
• AI/ML Projects: Experience working on AI/ML and GenAI projects, particularly in a security or risk assessment capacity is a plus
• Strong knowledge and work experience with IT General Controls and best practice cybersecurity controls
• Thorough technical understanding of internal control requirements and design and experience in applying them in various businesses.
• 5+ years of experience gained within IT risk, compliance, internal controls or audit
• Business or IT degree / certificates (CISA, CISM)
• Ability to independently take initiative, identify new projects and deliver with minimal support from the team or manager.
• Ability to develop solid relationships with business partners in order to drive the adoption of the risk management culture.
• Hands on experience with large e-commerce or tech companies preferable
• Working experience in a DevOps environment is a plus. Knowledge on DevOps tools such as Puppet, Git, Docker or Kubernetes, or any IT Service Management tools is a plus
• Strong communication skills; fully comfortable working in English, both written and spoken

Once on board we offer various programs and benefits:

• 22 annual vacation days, 3 sick days that are not carried to the next year (no medical certificate required)
• A seniority day is added every 3 years in the company
• Floating days - free day for every public holiday that falls on the weekend, with the exception of holidays which always fall during the weekend
• Annual Company Bonus prorated according to the number of worked months in a year
• Private medical insurance
• Access to an online benefit platform, with a monthly allowance of 690 RON, which you can choose to invest in different wellbeing, financial, or retail packages
• Financial support for the birth of your child or unhappy events
• A work culture based on cooperation and development - customized learning paths through external providers as well as special development programs.
• We offer remote work flexibility, driven by smart working principles and aligned with team goals and values
• Wellbeing initiatives to encourage a healthy work life balance through webinars, specialized sessions and internal programs, per our colleagues’ input