Regulatory Compliance Manager
PROJECT INFORMATION:
Start: ASAP (flexible).
Rate: 180-200 PLN/h.
Contract: B2B 6 months + possible prolongations.
Onsite: 4 days per week
Location: Warsaw.
Project language: English.
Business trips: some occasional included.
Recruitment process: 2 interviews.
About a role:
As Regulatory Compliance Manager, you will translate complex technology and information security regulations into clear, actionable requirements, embed compliance in everyday operations, and navigate through an evolving regulatory landscape.
The role is central to regulatory compliance efforts across information security and emerging technology. With NIS2 as the primary focus, you will contribute to AI governance and ensure that global and local requirements are reflected in practical governance, security, and operational measures.
You will have ownership of your area with the flexibility to explore the best way forward, based on ongoing initiatives. The goal is to create clarity and traceability without adding unnecessary complexity, while considering operational and business needs.
You will join the Security Governance & Risk team within Group Information Security & Compliance. This diverse team works collaboratively, with an emphasis on informal dialogue, as we operate from the office four days a week.
In this role, you will connect regulatory requirements with technological, security, and business operations.
Responsibilities:
Maintain an internal overview of relevant regulations impacting information security & technology (e.g. NIS2, AI Act, CER directive, Cyber Resilience Act) and collaborate with internal owners of these regulations.
Maintain the existing NIS2 coordinator network.
Assess new regulatory requirements and their impact on the security, risk, and technology landscape.
Translate regulatory obligations into practical controls, frameworks, policies, and implementation roadmaps.
Support legal assessments and gap analyses across local information security officers.
Assist with the NIS2 initiative organization-wide and ensure alignment with implementation.
Prepare compliance reporting and regular updates for senior management and audit committees.
Monitor regulatory developments, provide recommendations on required actions.
Maintain compliance documentation and evidence for internal and external audits.
Support the development of an AI governance framework, including policies, guidelines, and awareness activities.
Requirements:
Strong understanding of regulatory compliance, information security governance, cyber security governance, IT risk, IT audit, or a related field.
An educational background in information security, risk management, business administration, or business law is beneficial; what is crucial is your capability to grasp regulation and operationalize it within a large technology environment.
Being familiar with regulations and frameworks, including NIS2, the AI Act, ISO 27001 and understand the interplay between regulatory requirements and technical/operational controls.
Experience in developing policies, guidelines, or governance frameworks within a complex global organization is an advantage.
Personal traits:
Strong professional judgement, ownership, curiosity, and a business focus,
Abiliy to effectively engaging others and ensuring project completion.