QA and SDLC Control Analyst

At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.

Join our client’s team as a QA and SDLC Control Analyst

Are you passionate about cybersecurity governance, control compliance, and enabling secure software delivery? We are looking for a Control Analyst to support SDLC and Deployment Control processes and ensure compliance across global cybersecurity engineering teams.

Sounds like your kind of challenge?

#LI- Hybrid – 6 days a month from the office in Kraków

What you get in return

Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)

Hybrid work setup – 6 days a month from the office in Kraków

Collaborative team culture – work alongside experienced professionals eager to share knowledge

Continuous development – access to training platforms and growth opportunities

Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more

High quality equipment – laptop and essential software provided

Daily tasks

• Define best practices and compliance benchmarks for SDLC and Deployment (DEPL) controls across cybersecurity projects.
• Manage the spot-check process and compliance reviews for cyber delivery teams to identify deficiencies.
• Deliver training and guidance on SDLC/Deployment controls for engineers, fostering consistent compliance.
• Monitor and report control compliance status and DevOps metrics to stakeholders.
• Drive workshops, communicate expectations, resolve issues, and manage decision-making sessions with stakeholders across delivery, control, and governance teams.
• Support the adoption of processes associated with agile software development and DevOps.
• Provide process improvement recommendations and create clear, effective workflows.

Requirements

Experience & Skills:

Minimum 3+ years as a Business Analyst / Test Analyst in Agile development environments.

Familiarity with SDLC best practices and test evidence compliance.

Experience using QA tools ( qTest, Tricentis, Zephyr ).

Proficiency in Microsoft Office Suite ( Excel, Visio, PowerPoint ) for data analysis and reporting.

Good knowledge of Governance, Risk, and Compliance (GRC) processes.

Strong communication skills with the ability to run workshops and stakeholder sessions independently .

Preferred:

IIBA certifications ( ECBA, CCBA, CBAP ).

Knowledge of vulnerability scanning tools ( SAST, DAST, MAST ) and application security practices.

Familiarity with Agile methodologies (SAFe, Scrum) .

SQL and cloud experience ( GCP, AWS, Azure ).

Experience delivering process flow diagrams and improvement initiatives .

Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.

Must have: Business Analyst, SDLC, QA, qTest, Excel, Visio, PowerPoint, Data analysis, GRC

Nice to have: CBAP, SAST, DAST, Security, SAFe, SQL, Cloud, GCP, AWS, Azure, Flow diagram