Technology Compliance & Controls Coordinator

Location: Katowice - 2 days office / 3 days remote

Technology Compliance & Controls Coordinator

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

An opportunity exists to support the day-to-day operation of the Europe West Technology Compliance and Control Tower capability. The role will coordinate compliance activities, maintain the consolidated inventory and control view, prepare management reporting, support Product Owners, coordinate evidence and follow up remediation, exceptions and overdue actions.

The role works across Europe West with Product Owners, Service Line and Member Firm technology teams, Risk Management, Information Security and relevant global teams. It is suited to someone who combines strong analytical discipline, practical technology risk knowledge and persistent stakeholder coordination.

Your key responsibilities

Operate the Control Tower reporting cycle

• Coordinate regular data submissions from Product Owners, Service Lines, Member Firms and supporting functions.
• Consolidate status information into a consistent Europe West reporting view.
• Prepare materials for weekly Control Tower discussions, monthly governance reviews and periodic attestations.
• Maintain action, decision, issue, risk, exception and escalation records and follow up overdue items.
• Produce clear reporting showing status, blockers, ownership and required decisions.

Maintain technology and AI inventory quality

• Support the creation and maintenance of a reliable Europe West technology and AI inventory.
• Reconcile data across agreed sources such as SCOTT, AIRA, APM, EMPIRE and Frontier AI reporting.
• Identify missing records, duplicates, incomplete ownership, inconsistent classifications and outdated lifecycle information.
• Coordinate periodic Product Owner validation and track data-quality issues through to resolution.
• Apply agreed inventory scope, registration thresholds and minimum information requirements.

Coordinate controls and regulatory requirements

• Maintain a structured register of applicable technology compliance requirements and controls.
• Map requirements to products, owners, evidence sources and review processes.
• Support compliance activity relating to NIS2, the EU AI Act, the Cyber Resilience Act, privacy, data protection, cybersecurity and technology governance.
• Support gap assessments and track resulting actions.
• Coordinate with Risk Management, Information Security, Privacy, Legal and Technology teams on evidence and status.

Support Product Owners and technology teams

• Provide practical guidance on inventory, control, evidence, remediation, exception and lifecycle requirements.
• Coordinate briefings, communications, training and reference materials.
• Help owners identify the appropriate compliance and Information Security contacts.
• Record uncertainties regarding ownership and route them for resolution.
• Follow up missing information or evidence and escalate persistent issues through the agreed route.

Track findings, remediation and exceptions

• Maintain a consolidated overview of compliance findings, vulnerabilities and remediation commitments.
• Confirm that issues have an accountable owner, agreed treatment, target date and supporting evidence.
• Coordinate evidence collection and closure validation with Product Owners, support teams and Information Security.
• Monitor exceptions and remediation plans, including approvals and expiry dates.
• Highlight overdue actions, approaching deadlines and recurring issues.

Support audits, assurance reviews and management requests

• Coordinate evidence collection for internal and external reviews, audits and management requests.
• Maintain organized and traceable documentation.
• Track requests, responses, findings and remediation actions through to validated closure.
• Identify recurring evidence or data gaps and recommend improvements to templates, guidance or processes.

Support process improvement, automation and stakeholder coordination

• Document compliance workflows, interfaces and data dependencies.
• Identify opportunities to standardize templates, reports, evidence requirements and communications.
• Support automated reminders, workflow integration, dashboards and relevant platform developments.
• Organize working sessions, document decisions and follow up actions across countries and Service Lines.
• Raise issues early when responsibilities, evidence expectations or deadlines are unclear.

Skills and attributes for success

• Analytical discipline: Works accurately with compliance, inventory, risk and remediation information from multiple sources.
• Technology risk awareness: Understands the purpose of controls, ownership, evidence, vulnerability remediation and lifecycle governance.
• Planning and organization: Manages recurring reporting cycles, competing deadlines and detailed follow-up across multiple stakeholders.
• Stakeholder coordination: Builds productive relationships and follows issues through to a clear outcome.
• Structured problem solving: Identifies gaps, inconsistencies and root causes and proposes practical improvements.
• Communication: Produces clear written updates, guidance, minutes and management reports.
• Professional challenge: Questions incomplete information constructively and escalates unresolved issues at the right time.
• Continuous improvement: Looks for standardization and automation opportunities while protecting data quality and control integrity.

To qualify for the role, you must have

• Relevant experience in IT compliance, technology risk, cybersecurity, internal audit, controls, project management or technology operations.
• Experience maintaining risk, compliance, audit, inventory or remediation records.
• Experience coordinating evidence, reports, stakeholder inputs and action tracking.
• Strong analytical, organizational and written communication skills.
• Ability to work with structured and unstructured data from multiple systems.
• Excellent written and verbal English communication skills.
• Ability to work effectively across countries, cultures and a matrix organization.