We're looking for a Senior Risk & Controls professional to take operational ownership of our technology risk and compliance program across all markets. In this hands-on role, you'll be the driving force behind our ITGC, audit, and risk processes — the go-to person for technology risk owners, auditors, and C-level stakeholders alike.
You'll lead the IT part of Enterprise Risk Management at OLX - making sure technology risks across our organisation are identified, understood and effectively mitigated. If you thrive at the intersection of technology risk, audit excellence, and stakeholder influence — and want to make a tangible mark on how a growing, multi-market organisation manages its risk landscape — this is your role.
What you'll be doing?
- Drive the identification, assessment and mitigation of technology risk across the organization, with primary focus on our product platforms - keeping the Technology Risk Register current, ensuring risk owners are accountable
- Develop, coordinate and monitor of IT risk treatment strategies
- Partner closely with the Internal Audit team, including a decisive role in audit plan development, as well as monitoring of the closure of audit issues.
- Coordinate the year-end external auditor ITGC testing cycle end-to-end — and drive findings through to resolution.
- Act as advisor to CTO and security teams across all aspects of IT risk and security.
- Lead and support the implementation of the group's new Risk & Compliance system.
- Maintain and apply the ITGC control framework and testing methodology, and support the buildout of internal testing capability (currently performed by the external auditor and partly by Internal Audit).
What will you need to be successful in this role?
- Expertise in technology risk, IT audit, or IT governance, ideally with exposure to multi-market environments.
- Previous experience in an internal Risk & Controls function, an IT-focused internal audit team or a Big 4 practice delivering IT/Technology Risk Assurance services.
- Solid working knowledge of IT control and security frameworks (ISO 27001, NIST) and practical experience supporting external and internal audits.
- Experience with risk registers, controls testing, and issue-tracking processes; detail-oriented and highly organised.
- Proven ability to influence and align senior stakeholders — excellent communication, presentation, and negotiation skills, with the confidence to chase and influence risk/control owners without formal authority over them.
- A technology-savvy mindset with the confidence to constructively challenge decisions and opinions.
- Client-friendly, collaborative, and a pragmatic problem-solver who actively listens to stakeholders.
Helpful, but not required:
- Familiarity with GRC / risk-register tooling, including experience with a platform migration or implementation.
- Professional certification such as CISA or CRISC.
What can we offer?
- Unique opportunity to become a part of an international group and one of the major Internet Brands in the world, contributing to the global OLX success.
- Fun and informal environment where getting stuff done and enjoying the ride is far more important than rules and hierarchies.
- Continuous investment in your development, through trainings and e-courses.
- Complex compensation package (annual performance-based bonus, medical insurance, flexible benefits).
- Work in a hybrid model - three days per week from the office.
Skills Required
- Expertise in technology risk, IT audit, or IT governance, ideally in a multi-market environment
- Experience in an internal Risk & Controls function, IT-focused internal audit team, or Big Four IT/Technology Risk Assurance practice
- Working knowledge of IT control and security frameworks, including ISO 27001 and NIST
- Practical experience supporting external and internal audits
- Experience with risk registers, controls testing, and issue-tracking processes
- Strong communication, presentation, negotiation, and senior stakeholder-influence skills
- Technology-savvy mindset with ability to constructively challenge decisions and opinions
- Client-friendly, collaborative, pragmatic problem-solving approach
- Familiarity with GRC or risk-register tooling
- Experience with a GRC platform migration or implementation
- Professional certification such as CISA or CRISC
What We Do
At OLX, we build leading marketplace ecosystems enabled by tech, powered by trust, and loved by our customers. Together we're building a more sustainable world through trade. Serving tens of millions of people every month, we help people buy and sell cars, find housing, get jobs, buy and sell household goods, and much more. Our well-loved consumer brands (including OLX, Otomoto, Otodom, Property24, and more) offer safe, smart, and convenient trading platforms and services for our customers. OLX is powered by teams around the world, who are unified in their ambition to help people get more from the world’s limited resources. We are OLX.
