Compliance Manager

Immersion Labs integrates VR, AR, AI, and game engine technology to create solutions for education, healthcare, defense, law enforcement training, and services. The company has over 90 employees and primarily works with clients from the USA, enabling global and innovative projects.

• Minimum 5 years of experience in compliance, data protection, information security, or auditing, including at least 2 years in an independent role within technology, SaaS, EdTech, or HRTech companies
• Experience implementing ISO 27001 or other security standards and participating in certification or supervisory audits
• Understanding of AI Act requirements and ability to translate them into organizational and product processes and policies
• Knowledge of regulatory requirements and standards in the US market, including law enforcement sector
• Experience working with enterprise clients and external auditors
• Practical experience with RODO and independently performing data protection duties
• Knowledge of NIS2 and Polish national cybersecurity law
• Familiarity with sector-specific regulations such as DORA
• Sufficient technical knowledge to collaborate with technical teams and verify security requirements
• Proficiency in English (spoken and written)
• Use of AI tools in daily work
• Proactive identification of process and product gaps and translating them into concrete actions

Nice to have:

• Knowledge of UK market regulatory requirements and standards
• Experience implementing ISO 42001
• Professional certifications

• Own the compliance area including policies, procedures, and their periodic review and update
• Ensure company and product compliance with legal regulations and industry standards in Poland and the US (RODO, AI Act, ISO 27001, NIS, SOC 2, FIPS, and others)
• Identify, assess, document, and monitor compliance risks and define risk mitigation actions
• Prepare and coordinate responses to client security questionnaires
• Serve as Data Protection Officer overseeing data protection and information security compliance, including defining requirements for technical teams and verifying their implementation
• Maintain required certifications, prepare for external audits and certification processes, conduct internal audits, and oversee post-audit actions
• Manage investigations of non-compliance and incidents
• Provide advisory support to teams, conduct internal training, and report compliance status and risks to management

Immersion Labs is the data controller based in Warsaw, Poland. Candidates have rights to access, correct, delete, or restrict processing of personal data, object to processing, data portability, and complaints to supervisory authorities. Providing mandatory data is required for recruitment; refusal may result in inability to proceed. Personal data processed for recruitment purposes and potential future recruitments based on consent that can be withdrawn anytime.