Regulatory Compliance Manager

The role operates within the Security Governance & Risk team inside Group Information Security & Compliance, focusing on regulatory compliance efforts for information security and emerging technology in a transportation/logistics context. The team works collaboratively with an emphasis on informal dialogue, primarily from the office in Warsaw.

• Strong understanding of regulatory compliance, information security governance, cyber security governance, IT risk, IT audit, or related fields.
• Educational background in information security, risk management, business administration, or business law is beneficial.
• Familiarity with regulations and frameworks including NIS2, the AI Act, and ISO 27001, and understanding the interplay between regulatory requirements and technical/operational controls.
• Experience in developing policies, guidelines, or governance frameworks in complex global organizations is an advantage.

Personal traits:

• Strong professional judgment, ownership, curiosity, and a business focus.
• Ability to effectively engage others and ensure project completion.

• Maintain an internal overview of relevant regulations impacting information security and technology, such as NIS2, AI Act, CER directive, and Cyber Resilience Act.
• Collaborate with internal owners of these regulations and maintain the existing NIS2 coordinator network.
• Assess new regulatory requirements and their impact on security, risk, and technology.
• Translate regulatory obligations into practical controls, frameworks, policies, and implementation roadmaps.
• Support legal assessments and gap analyses across local information security officers.
• Assist with organization-wide NIS2 initiatives and ensure alignment with implementation.
• Prepare compliance reporting and regular updates for senior management and audit committees.
• Monitor regulatory developments and provide recommendations on required actions.
• Maintain compliance documentation and evidence for internal and external audits.
• Support the development of an AI governance framework, including policies, guidelines, and awareness activities.