Control Analyst

O projekcie:
At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe. 

 

Join Our Team as a Control Analyst (SDLC and Deployment Controls)!

Are you passionate about governance, risk controls, and enabling engineering teams to deliver secure and compliant software? We are looking for a Control Analyst to help implement and drive adoption of SDLC and Deployment (DEPL) controls within a global cybersecurity function.

Sounds like your kind of challenge? 

LI-Hybrid - 6x/month from the office in Kraków

What you get in return

- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.)
- Hybrid work setup – 6x/month from the office in Kraków
- Collaborative team culture – work alongside experienced professionals eager to share knowledge 
- Continuous development – access to training platforms and growth opportunities 
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more 
- High quality equipment – laptop and essential software provided

Wymagania:
- Proven experience in an Agile delivery environment (e.g., Change/Control Analyst, Business Analyst, Test Analyst).
- Strong ability to define and present compliance evidence for audits or assurance.
- Working knowledge of change delivery and related tools (e.g., ServiceNow or equivalent).
- Good understanding of governance, risk, and control frameworks.
- Excellent stakeholder engagement and facilitation skills, including running workshops.
- Proficiency with reporting and analysis tools (Excel, PowerPoint, process mapping with Visio).
- Strong communication skills in English – both written and verbal.

Desirable Skills

- Familiarity with DevOps metrics and performance tracking.
- Industry certifications: ITIL, Agile/SAFe, IIBA.
- Experience using QA/test management tools (qTest, Tricentis, Zephyr).
- Knowledge of application security testing (SAST/DAST/MAST) and vulnerability management.
- Hands-on experience with Jira, Confluence, ServiceNow, and reporting tools such as Google Data Studio or Excel Power Query.

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Codzienne zadania:
- Define and embed good practice: clarify expectations for SDLC and Deployment controls and coach teams on compliance.
- Run spot-checks: conduct control-related reviews for Cyber changes and applications; document findings and track remediation.
- Evidence and reporting: ensure complete, audit-ready compliance evidence (testing records, approvals, change logs) and maintain regulatory reporting.
- Monitor DevOps metrics: track software delivery KPIs, identify gaps or trends, and recommend corrective actions.
- Training and enablement: develop and deliver training and communications to drive adoption of SDLC/DEPL processes and metrics.
- Stakeholder management: lead workshops and working sessions to align expectations, resolve issues, and build consensus.
- Continuous improvement: simplify workflows and improve documentation to make compliance more seamless for engineering teams.