XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America.
At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.
We are a certified Great Place to Work company.
Responsibilities
- Building, developing, and continuously improving the operational risk management function by implementing best practices, methodologies, and standards
- Developing and maintaining operational risk management policies and procedures, ensuring compliance with regulatory requirements and consistency across the group
- Coordinating and leading the RCSA (Risk and Control Self-Assessment) process, supporting business units in identifying risks, assessing control effectiveness, and documenting results
- Conducting scenario analyses to assess the organisation's ability to operate under operational disruptions and incidents
- Maintaining and enhancing the operational risk register, ensuring its completeness, accuracy, and linkage to business processes
- Contributing to the development and monitoring of the Risk Appetite Framework, including defining, tracking, and reporting Key Risk Indicators (KRIs)
- Supporting the Business Continuity Planning (BCP) process by collaborating on Business Impact Analyses (BIA), contingency plans, and resilience testing
- Preparing comprehensive risk reports for senior management, the Risk Committee, and supervisory authorities
- Promoting a strong risk management culture across the organisation through training, workshops, and advisory support for business units, fostering risk awareness and ownership
Requirements
Minimum 5 years of experience in operational risk management, preferably in an investment firm, bank, fintech, or consulting firmSolid knowledge of operational risk management and enterprise risk management (ERM), familiarity with ISO 31000, COSO, and relevant regulatory requirements is an advantagePractical experience with RCSA processes, including assessing control effectiveness and exposure to operational risksExperience in identifying, measuring, and monitoring non-financial risksUnderstanding of scenario analysis methodologies used to identify and quantify operational riskAbility to analyze business processes, detect weaknesses, and develop actionable recommendations for improvementProven experience in cross-functional collaboration on risk assessments, business impact analyses (BIA), and operational resilience initiativesStrong command of analytical and reporting tools, such as Excel, JIRA, and Confluence, and ability to work with large data setsAbility to synthesize complex risk information and present it clearly to diverse audiences including management, regulators, auditors, and business teamsSelf-driven, proactive, and detail-oriented, with a focus on process improvement and effectivenessProficiency in English sufficient for professional communicationNice to have
Experience with GRC (Governance, Risk & Compliance) toolsWhat We Offer
Stable employment based on an employment contractA chance to grow within the FinTech industry in an international environment, while having a real impact on the company and the evolution of its productsTraining under the supervision of experienced financial market professionalsA clear development path supported by regular feedback and transparent career progressionHybrid or remote work model, depending on your needsRegular team-building and integration eventsEquipment tailored to your needsWide range of benefits like private medical care, myBenefit platform, sport card, language learning platform, meal co-financing at the office and more