Technology Compliance & Controls Coordinator
EY · Katowice
Location: Katowice - 2 days office / 3 days remote
Technology Compliance & Controls Coordinator
Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.
The opportunity
An opportunity exists to support the day-to-day operation of the Europe West Technology Compliance and Control Tower capability. The role will coordinate compliance activities, maintain the consolidated inventory and control view, prepare management reporting, support Product Owners, coordinate evidence and follow up remediation, exceptions and overdue actions.
The role works across Europe West with Product Owners, Service Line and Member Firm technology teams, Risk Management, Information Security and relevant global teams. It is suited to someone who combines strong analytical discipline, practical technology risk knowledge and persistent stakeholder coordination.
Your key responsibilities
Operate the Control Tower reporting cycle
- Coordinate regular data submissions from Product Owners, Service Lines, Member Firms and supporting functions.
- Consolidate status information into a consistent Europe West reporting view.
- Prepare materials for weekly Control Tower discussions, monthly governance reviews and periodic attestations.
- Maintain action, decision, issue, risk, exception and escalation records and follow up overdue items.
- Produce clear reporting showing status, blockers, ownership and required decisions.
Maintain technology and AI inventory quality
- Support the creation and maintenance of a reliable Europe West technology and AI inventory.
- Reconcile data across agreed sources such as SCOTT, AIRA, APM, EMPIRE and Frontier AI reporting.
- Identify missing records, duplicates, incomplete ownership, inconsistent classifications and outdated lifecycle information.
- Coordinate periodic Product Owner validation and track data-quality issues through to resolution.
- Apply agreed inventory scope, registration thresholds and minimum information requirements.
Coordinate controls and regulatory requirements
- Maintain a structured register of applicable technology compliance requirements and controls.
- Map requirements to products, owners, evidence sources and review processes.
- Support compliance activity relating to NIS2, the EU AI Act, the Cyber Resilience Act, privacy, data protection, cybersecurity and technology governance.
- Support gap assessments and track resulting actions.
- Coordinate with Risk Management, Information Security, Privacy, Legal and Technology teams on evidence and status.
Support Product Owners and technology teams
- Provide practical guidance on inventory, control, evidence, remediation, exception and lifecycle requirements.
- Coordinate briefings, communications, training and reference materials.
- Help owners identify the appropriate compliance and Information Security contacts.
- Record uncertainties regarding ownership and route them for resolution.
- Follow up missing information or evidence and escalate persistent issues through the agreed route.
Track findings, remediation and exceptions
- Maintain a consolidated overview of compliance findings, vulnerabilities and remediation commitments.
- Confirm that issues have an accountable owner, agreed treatment, target date and supporting evidence.
- Coordinate evidence collection and closure validation with Product Owners, support teams and Information Security.
- Monitor exceptions and remediation plans, including approvals and expiry dates.
- Highlight overdue actions, approaching deadlines and recurring issues.
Support audits, assurance reviews and management requests
- Coordinate evidence collection for internal and external reviews, audits and management requests.
- Maintain organized and traceable documentation.
- Track requests, responses, findings and remediation actions through to validated closure.
- Identify recurring evidence or data gaps and recommend improvements to templates, guidance or processes.
Support process improvement, automation and stakeholder coordination
- Document compliance workflows, interfaces and data dependencies.
- Identify opportunities to standardize templates, reports, evidence requirements and communications.
- Support automated reminders, workflow integration, dashboards and relevant platform developments.
- Organize working sessions, document decisions and follow up actions across countries and Service Lines.
- Raise issues early when responsibilities, evidence expectations or deadlines are unclear.
Skills and attributes for success
- Analytical discipline: Works accurately with compliance, inventory, risk and remediation information from multiple sources.
- Technology risk awareness: Understands the purpose of controls, ownership, evidence, vulnerability remediation and lifecycle governance.
- Planning and organization: Manages recurring reporting cycles, competing deadlines and detailed follow-up across multiple stakeholders.
- Stakeholder coordination: Builds productive relationships and follows issues through to a clear outcome.
- Structured problem solving: Identifies gaps, inconsistencies and root causes and proposes practical improvements.
- Communication: Produces clear written updates, guidance, minutes and management reports.
- Professional challenge: Questions incomplete information constructively and escalates unresolved issues at the right time.
- Continuous improvement: Looks for standardization and automation opportunities while protecting data quality and control integrity.
To qualify for the role, you must have
- Relevant experience in IT compliance, technology risk, cybersecurity, internal audit, controls, project management or technology operations.
- Experience maintaining risk, compliance, audit, inventory or remediation records.
- Experience coordinating evidence, reports, stakeholder inputs and action tracking.
- Strong analytical, organizational and written communication skills.
- Ability to work with structured and unstructured data from multiple systems.
- Excellent written and verbal English communication skills.
- Ability to work effectively across countries, cultures and a matrix organization.
Ideally, you’ll also have
- A degree in information systems, technology, risk, business or a related discipline, or equivalent work experience.
- Relevant professional training or certification in technology risk, security, audit, privacy or compliance.
- Experience with AI governance, regulatory implementation, asset repositories or vulnerability management.
- Working knowledge of Microsoft 365, Power BI, workflow tools or GRC solutions.
What we look for
We are interested in hiring a team player with strong communication and organization skills as well as proactive attitude, with high level of energy, enthusiasm, flexibility and assertiveness. You should be able to independently complete your regular responsibilities according to deadlines, communicate with other teams in order to resolve daily challenges and show professionalism while day-to-day contact with EY clients and partners.
What we offer
EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.
- Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
About EY
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
The exceptional EY experience. It’s yours to build.
In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.