CRYP Senior Controls SME

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.

This role operates within the first line of defense (1LOD) in Cybersecurity risk management. You will be accountable for ensuring cryptographic controls align with bank standards and regulatory requirements, as well as embedding a culture of secure governance across the organization. The position spans risk assessment, control governance, compliance reporting, stakeholder collaboration, and continuous monitoring.

Sounds like your kind of challenge?

What you get in return

Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)

Hybrid work setup – remote days available depending on the client’s arrangements - 6 days a month from the office in Kraków

Collaborative team culture – work alongside experienced professionals eager to share knowledge

Continuous development – access to training platforms and growth opportunities

Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more

High quality equipment – laptop and essential software provided

Daily tasks

• Controls Governance: Maintain cryptographic controls within the Risk Control Framework and review key governance documents (WoW, Helios updates)
• Continuous Monitoring: Evaluate control effectiveness, review Mandatory Procedures (MPs) and Operating Instructions (OIs), and ensure ongoing improvements
• Risk & Compliance: Ensure that cryptography policies align with regulatory frameworks and internal audit requirements
• Stakeholder Engagement: Act as the primary contact for control queries, collaborate with risk owners, 2LoD/3LoD reviewers, and regulators
• Reporting: Manage and track key metrics (KCIs, KRIs, GRAS) to inform senior management, audit, and compliance
• Cross-Team Collaboration: Engage with multiple control owners to manage dependencies and ensure consistent risk mitigation strategies
• Training & Awareness: Develop training materials and awareness programs to promote adoption of cryptography control policies globally

Requirements

Technical Background: Strong understanding of technology security principles (cryptography knowledge strongly preferred or ability to learn quickly)

Risk & Controls Expertise: Hands-on experience with governance frameworks and risk management processes

Communication & Leadership: Ability to translate complex technical security concepts for senior non-technical stakeholders

Stakeholder Management: Proven track record managing relationships with compliance, audit, business units, and regulators

Problem-Solving: Skilled at identifying control gaps, defining remediation plans, and streamlining processes collaboratively

Excellent verbal and written English communication

Nice-to-Have

Familiarity with Helios, WoW documentation , and internal control standards

Knowledge of financial services risk and control practices

Experience in cybersecurity environments or cryptography-driven projects

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Must have: Security, Cryptography, risk management, Stakeholder management, Audit

Nice to have: Cybersecurity