The Risk & Compliance team ensures that policies/procedures are in compliance with Polish and European legal regulations regarding business continuity and Crisis Management. They actively participate in the business continuity planning process within the organization, supporting business units in identifying and assessing potential disruptions. Their responsibilities include developing, enhancing, and safeguarding the resilience and operational stability of the Allegro brand.
What does this role involve?
- Develop, implement and maintain a business continuity management system (BCMS) processes and related governance framework.
- Coordinate the yearly Business Impact Analysis assessments, ensuring full coverage of processes, identification of mission critical activities and development of Business Continuity Plans.
- Coordinate the execution and reporting of BCM related tests.
- Review and advise on key projects and change processes.
- Develop, implement and maintain an incident & crisis management process as an interface to BCM.
- Coordinate with internal and external auditors during BCM related audits.
- Prepare and present detailed reports on BCM and risk management activities to relevant committees and governance bodies.
- Support all teams within the Allegro Group in Business Continuity (including Crisis Management) through consultations and substantive support.
- Responsibility for educational activities, information gathering, and training in business continuity.
- Ensure that policies/procedures comply with Polish and European legal regulations regarding Business Continuity.
- Support the Chief Security Officer in implementing the department's strategy.
- Maintain and update internal documentation related to Business Continuity processes.
- Establish priorities for the implementation of mechanisms, processes, and procedures in the Business Continuity system
What can we offer:
- A hybrid work model (3-2). Well-located offices in Poznań or Warszawa (with fully equipped kitchens and bicycle parking facilities) and excellent working tools (height-adjustable desks, interactive conference rooms).
- A wide selection of fringe benefits in a cafeteria plan – you choose what you like (e.g. medical, sports or lunch packages, insurance, purchase vouchers).
- Working with partners from different business units on cross-functional projects.
- Collaborating with the best experts - it will enable you to expand your experience in the field of risk and compliance.
- Being part of a team that is always willing to share knowledge with others.
- We follow the best practices and standards.
- Continuous improvement is a real thing at Allegro, it's not just a buzzword.
- You will have the opportunity to learn a lot from the experts you work with.
- You will explore extremely interesting topics at the intersection of law, business, and technology.
- Our tools and technology are designed to help you with your daily work.
- Access to a wide selection of training programs on our internal MindUp platform.
- If you want to learn more, check it out for yourself.
This is the right job for you if:
- Have at least 5 years of experience in a similar position (including business continuity and crisis management), including experience working with businesses.
- You have specialized education in Business Continuity, Crisis Management, Risk Management.
- Have experience in managing project teams and leading complex projects.
- Have the ability to efficiently organize their work schedule and set priorities.
- Have analytical and unconventional thinking abilities.
- Quickly assimilate new subjects and search for and synthesize information.
- Have a strong command of English and Polish, both written and spoken, at a minimum C1 level (a required prerequisite).
- Knowledge of the Czech language would be an additional advantage.
- Are familiar with DORA and NIS 2 and are able to navigate through them.
- Have good communication skills, both spoken and written.
- Have industry certificates confirming their experience and acquired skills.
- Are familiar with ISO standards 27001, 27005, 31000, 22301.
- Know methodologies and practices in IT management (e.g., ITIL, COBIT, COSO, So.)
