GRC/Dora Compliance Lead

We are looking for an experienced Governance, Risk & Compliance (GRC) professional to support regulatory compliance, operational resilience, and information security governance initiatives within a highly regulated environment.

Language

• English and German — B2 minimum

Work arrangement

• Remote / hybrid, depending on location
• Hybrid in Warsaw, Gdansk, or Wroclaw

Key Responsibilities

• Governance, Risk & Compliance (GRC)
• DORA and NIS2 compliance
• GDPR and data privacy
• Risk assessments and gap analysis
• Internal controls and remediation
• Information security policies and standards
• Operational resilience and business continuity
• Audit readiness and compliance reporting
• Stakeholder management
• Security awareness and compliance training

Required Experience

• Information security governance
• Regulatory compliance programmes
• Risk management frameworks
• DORA
• NIS2
• GDPR
• Internal controls testing
• Audit and remediation activities
• Security policies and procedures

Preferred Certifications

• CISA
• CISM
• CISSP
• CIPP / CIPM
• ISO 27001 Lead Auditor

Ideal Background

• GRC Consultant
• Information Security Compliance Manager
• Cyber Risk Manager
• Security Governance Lead
• DORA Compliance Lead
• IT Risk & Compliance Manager
• Information Security Auditor

Please only apply if you speak German and English and match the required stack.