IT Risk and Data Protection Specialist

UniCredit in Poland belongs to one of the largest financial groups in Europe, serving over 15 million Clients, including one million businesses. We are building a new banking model that combines the speed and appeal of a fintech with the strength and stability of a universal bank. We draw on 150 years of experience and the unique expertise of our teams, acting as the Group’s pan-European innovation hub. We are creating ultra-fast and transparent banking with an “all-in-one” application and new opportunities for all Clients - individual, business, and corporate. We provide full omnichannel service thanks to a network of flagship branches in key Polish cities and our Support Center. Our greatest value is our People - a Team of creative experts who thrive in a dynamic and innovative environment. We focus on collaboration, engagement, and achieving ambitious goals. We are looking for a IT Risk and Data Protection Specialist to join us at this pivotal moment, share our vision, and help shape the future of European banking. User Lifecycle & Privileged Access Management: Execute end-to-end access provisioning, modification, and revocation for employees and third-party users, including managing Privileged Access Management (PAM) for high-risk accounts critical to banking infrastructure. Access Requests & Technical Troubleshooting: Manage the daily IAM ticket queue (e.g., in ServiceNow or Jira), mapping and assigning access rights. Assist users via daily support channels to resolve complex access issues involving Active Directory, Google Workspace, and internal banking applications. System Recertifications & Asset Governance: Regularly review user access across systems to make sure permissions are still valid and compliant with banking secrecy and regulatory frameworks. Reach out to system owners, update permissions lists, and fix discrepancies. Integrations & System Onboarding: Support the onboarding of new applications into the IAM framework. Participate in discussions with System Owners to help define Role-Based Access Control (RBAC) mappings, and user groups for both test and production environments. Periodic Controls, Audits & Compliance: Execute periodic IAM controls to ensure all processes are working as expected. Gather evidence and maintain records to demonstrate compliance with strict regulatory standards like DORA, and local financial authority requirements (e.g., KNF). Technical Foundations: Hands-on experience with Active Directory, Google Workspace, or enterprise IAM/IGA tools (e.g., SailPoint, CyberArk, Okta). Automation Skills: An efficiency mindset with the ability to write basic scripts (e.g., PowerShell, Python, or Bash) and query databases (SQL) to automate repetitive tasks, bulk provisioning, or data extraction for audits. Security & Compliance Mindset: Understanding of security principles (Least Privilege, Segregation of Duties) and experience working in a highly regulated environment, preferably within the financial or banking sector. Core Attributes: Exceptional attention to detail, persistence, and a strong drive to solve complex, non-obvious technical problems. Communication: Strong communication skills to collaborate effectively with system owners, IT security teams, and end users. Fluency in English and Polish (both written and spoken). Experience: Previous experience in IAM, IT Support, or Systems Administration. Your attitude, problem-solving skills, and eagerness to learn new enterprise technologies are what matter most. You will get an opportunity to work in an innovative, digital bank applying state of the art approaches and technologies. Unless limited by banking regulations we offer a flexible form of contract . You will be provided an Individual Development Budget , dedicated to enhancing your professional skills. If your role permits, we also offer flexible work location : home/office — according to your preference. You and your closest family will be covered with VIP-level private medical care which includes dental treatment and a hospitalisation package . We care for our colleagues’ well being, therefore we cover psychological consultations if you ever feel you need such support. We co-sponsor your Multisport card and cover 50% of its cost. You will work on computer equipment that delivers the best user experience — Apple MacBook . Our office in Warsaw offers healthy snacks throughout the day. We keep our recruiting process simple. Step 1: Talk with one of our Recruiters about your to date experiences and ambitions Step 2: Meet with your future Team Manager to deep dive on the role specifics and our work environment Diverse teams really are the best teams. Research shows that some candidates may hesitate to apply for a job unless they meet every requirement. If you are excited about working with us, we encourage you to apply - even if you're not 100% sure. We are interested in getting to know you and learning about what you bring to the table. Please note that we may close a job posting early if we receive a large number of exceptional applications. Good luck!