ZEN.COM

New

ICT Compliance Expert (Poland/Remote)

Brak informacji o wynagrodzeniu

SeniorZdalnie·KrakówFull-time

#470318·Dodano 6 dni temu·1

Źródło: ZEN.com

Aplikuj teraz

Tech Stack / Keywords

DORAISO 27001NIST CSFCIS ControlsPCI DSSGDPREBACISA

Podsumowanie oferty

ZEN.COM is a smart financial app for payments, online shopping, and personal finance management. The ICT Compliance Expert will support regulatory compliance across the fintech organization, translating requirements into obligations and coordinating implementation, documentation, and monitoring with technical and business teams.

Wymagania

Experience in ICT compliance, regulatory compliance, technology governance, information security compliance, or a related field.
Experience in fintech, payments, banking, or another regulated financial services environment.
Understanding of ICT environments, information security principles, technology operations, and the practical implementation of technical and organizational controls.
Experience interpreting regulatory requirements and translating them into actionable internal obligations.
Practical experience conducting compliance assessments, gap analyses, control mapping, and remediation tracking.
Experience maintaining policies, procedures, compliance registers, and supporting evidence.
Understanding of the relationship between regulatory obligations, internal controls, operational processes, and technical implementation.
Familiarity with financial services regulatory requirements, particularly DORA where applicable.
Knowledge of relevant security standards and frameworks, such as ISO 27001, NIST CSF, and CIS Controls.
Ability to collaborate with technical teams and understand how regulatory requirements apply to real systems and operational processes.
Ability to manage multiple regulatory obligations and deadlines in a changing regulatory environment.
Professional proficiency in English.
Share your Gallup test or similar assessment results, if available.

Nice to have:

Experience supporting DORA implementation or maintaining a regulatory obligations register.
Familiarity with PCI DSS, GDPR, EBA guidance, or other requirements relevant to the organization's activities.
Experience preparing evidence for regulatory inspections, external assessments, or compliance reviews.
Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, or other compliance-related qualifications.

Obowiązki

ICT Regulatory Requirements:

Identify, interpret, and maintain an up-to-date view of applicable ICT-related regulatory requirements, standards, and obligations relevant to the organization's business model.

Regulatory Change Management:

Monitor relevant regulatory developments and assess their potential impact on the organization's technology, security, operational processes, and documentation.

Compliance Framework:

Develop, maintain, and continuously improve the ICT compliance framework, including procedures, compliance methodologies, obligations registers, and supporting documentation.

Requirements Mapping:

Translate regulatory obligations into clear internal requirements and map them to relevant policies, processes, controls, and accountable owners.

Compliance Assessments:

Coordinate periodic assessments to determine whether relevant ICT requirements have been implemented and whether supporting evidence is available and adequate.

Compliance Gap Analysis:

Identify gaps between regulatory expectations and current practices, document findings, agree remediation plans with responsible teams, and track progress.

Evidence and Documentation Management:

Ensure appropriate evidence of compliance is maintained, organized, traceable, and available for management reviews, regulatory requests, and external assessments.

Policy and Standard Management:

Coordinate the review and maintenance of ICT-related policies, standards, procedures, and control documentation in collaboration with Cyber Security, ICT Risk, and relevant business owners.

DORA Compliance Support:

Support the assessment and ongoing monitoring of applicable DORA requirements, including ICT risk management, incident-related obligations, resilience testing, third-party ICT risk, and relevant governance and reporting requirements.

Third-Party Compliance:

Support compliance assessments relating to ICT service providers, outsourcing arrangements, contractual requirements, and applicable regulatory obligations.

Regulatory and External Assessments:

Coordinate responses to regulatory inquiries, external compliance reviews, and assurance activities related to ICT, working with relevant subject matter experts and control owners.

Management Reporting:

Prepare reports on compliance status, identified gaps, remediation progress, upcoming regulatory changes, and areas requiring management attention.

Stakeholder Coordination:

Work with ICT Risk, Cyber Security, IT, Engineering, Operations, Legal, and Compliance teams to establish clear responsibilities and consistent approaches to compliance.

Continuous Improvement:

Improve the efficiency and reliability of compliance processes, including regulatory mapping, evidence collection, control documentation, and remediation tracking.

Benefity

Flexible working conditions.
Private medical healthcare.
Internal and external training opportunities.

Opieka zdrowotna

Szkolenia wewnętrzne

ZEN.COM

3 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz