Regulatory Compliance Manager

Quick Facts

• Start: ASAP (flexible)
• Rate: 180-200 PLN/h
• Contract: B2B, 6 months + possible prolongations
• Onsite: 4 days per week
• Location: Warsaw
• Project language: English
• Business trips: some occasional included
• Recruitment process: 2 interviews

Description

As Regulatory Compliance Manager, you will translate complex technology and information security regulations into clear, actionable requirements, embed compliance in everyday operations, and navigate an evolving regulatory landscape. The role focuses on NIS2, contributes to AI governance, and ensures global and local requirements are reflected in practical governance, security, and operational measures.

You will maintain clarity and traceability without adding unnecessary complexity, aligning implementation with operational and business needs.

Responsibilities

• Maintain an internal overview of relevant regulations impacting information security & technology (e.g. NIS2, AI Act, CER directive, Cyber Resilience Act) and collaborate with internal owners of these regulations.
• Maintain the existing NIS2 coordinator network.
• Assess new regulatory requirements and their impact on the security, risk, and technology landscape.
• Translate regulatory obligations into practical controls, frameworks, policies, and implementation roadmaps.
• Support legal assessments and gap analyses across local information security officers.
• Assist with the NIS2 initiative organization-wide and ensure alignment with implementation.
• Prepare compliance reporting and regular updates for senior management and audit committees.
• Monitor regulatory developments, provide recommendations on required actions.
• Maintain compliance documentation and evidence for internal and external audits.
• Support the development of an AI governance framework, including policies, guidelines, and awareness activities.

Requirements

• Strong understanding of regulatory compliance, information security governance, cyber security governance, IT risk, IT audit, or a related field.
• Educational background in information security, risk management, business administration, or business law is beneficial; crucial is the capability to grasp regulation and operationalize it within a large technology environment.
• Familiarity with regulations and frameworks, including NIS2, the AI Act, ISO 27001 and understanding the interplay between regulatory requirements and technical/operational controls.
• Experience in developing policies, guidelines, or governance frameworks within a complex global organization is an advantage.
• Personal traits: strong professional judgement, ownership, curiosity, and business focus; ability to effectively engage others and ensure project completion.

Benefits

• Project-based B2B contract (6 months) with possible prolongations
• Onsite work 4 days per week with occasional business trips