Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 13 hours ago

IT Risk & Compliance Officer for Cloud

urban-connect39 open roles

Where
Bucharest, Romania
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Risk & Compliance Officer for Cloudurban-connect · Bucharest, Romania

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on urban-connect's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.4% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.0%1 day
  2. 4.2%3 days
  3. 11.4%7 days
  4. 17.5%14 days
  5. 34.2%30 days
  6. 43.5%60 days
This job: first seen 13 hours ago

The posting

Job Location: hybrid in Bucharest

Recruitment process:

  • HR screening
  • Technical Interview
  • Cultural discusion

Role description:

This role requires close collaboration with platform owners and development teams to build a strong high-level understanding of risk, while also being able to zoom in and out of the details to ensure a clear understanding of the solution design and to design effective controls.

Job Responsibilities:

  • Provide cybersecurity, IT risk, and regulatory compliance advice to platform owners, development teams, and business functions, in line with internal policies and standards such as NIST, SOX, PCI-DSS, and other relevant best practices, to support secure and compliant cloud adoption.
  • Bridge the gap between technical and audit teams by working with platform and development teams to translate complex technology or application stacks into risk-based language for Internal and External Audits.
  • Perform IT risk assessments for new platforms and significant platform changes, using the organization's risk and control framework, to identify key risks, assess control effectiveness, and recommend appropriate remediation actions.
  • Advise stakeholders on the design of sustainable, proportionate, and scalable controls, including cloud control requirements for identity and access management, logging, encryption, network security, and configuration governance, to strengthen risk management and compliance.
  • Develop and enhance cloud guardrails, standards, and control requirements, in line with internal governance and regulatory expectations, to support secure onboarding and consistent use of cloud services across platforms.
  • Drive continuous improvement and harmonization of cloud controls across platforms, following internal control standards and compliance requirements, to simplify compliance and improve control consistency.
  • Coordinate with Security, Risk and Controls, Internal Audit, External Audit, Business Continuity, IT Disaster Recovery, and Service Continuity teams, and support audit evidence requests as needed, to ensure effective risk oversight and timely audit support.

Required qualifications:

  • Preferred: 5+ years of experience gained within IT risk, compliance, internal controls or audit within a highly regulated industry.
  • Minimum: 3 years of experience gained within IT risk, compliance, internal controls or audit within a highly regulated industry.

Technical skills:

  • Strong expertise in business analysis, auditing, corporate governance, risk management or internal controls.
  • Ability to assess risks, evaluate controls, and provide practical, proportionate recommendations to both technical and non-technical stakeholders.
  • Basic technical understanding of internal control requirements and design and experience in applying them in various businesses.
  • Ability to translate complex technology and application stacks into risk-based language for Internal and External Audits.
  • Good technical expertise in Cloud Security and Compliance (AWS – strongly preferred, GCP, Azure, etc.) and DevOps domain.
  • Knowledge of cloud risk and control domains, including identity and access management, logging and monitoring, encryption, network security, and configuration governance.
  • Familiarity/experience working with a wide range of technologies (internally developed applications, Windows, Linux, Databases, Gitlab, etc.) from a risk and security perspective.

Soft skills:

  • Strong stakeholder management and communication skills, with the ability to collaborate effectively across technology, risk, audit, and business teams.
  • Ability to build solid relationships with business partners to drive the adoption of the risk management culture.
  • Ability to break down complex tasks into logical, manageable, and well-defined actions, ensuring effective execution and timely delivery.
  • Ability to adapt quickly to change and demonstrate flexibility and agility in response to evolving business priorities, stakeholder expectations, and the client's regulatory or operating environment.
  • Proven ability to work autonomously while remaining a collaborative and effective team player.

Desired qualifications (Nice to have):

  • Cloud certifications are an advantage for this position. Relevant certifications include AWS certifications, ISC2 certifications such as CCSP, and the Certificate of Cloud Security Knowledge (CCSK) issued by CSA.

Work conditions:

Working hours: 9:00-18:00 Working setup (hybrid, on site, remote): hybrid way of working with an onsite presence of 2 days/week.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against urban-connect's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on urban-connect's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    urban-connect's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.