ICT Compliance Expert (Poland/Remote)

About the role

ZEN.COM is looking for an ICT Compliance Expert to support the implementation, maintenance and monitoring of ICT-related regulatory and compliance requirements. The role translates applicable requirements into clear obligations and works with Cyber Security, ICT Risk, IT, Engineering, Operations and Legal or Compliance teams.

Requirements

• Experience in ICT compliance, regulatory compliance, technology governance, information security compliance, or a related field.

• Experience in fintech, payments, banking, or another regulated financial services environment.

• Understanding of ICT environments, information security principles, technology operations, and the practical implementation of technical and organizational controls.

• Experience interpreting regulatory requirements and translating them into actionable internal obligations.

• Practical experience conducting compliance assessments, gap analyses, control mapping, and remediation tracking.

• Experience maintaining policies, procedures, compliance registers, and supporting evidence.

• Understanding of the relationship between regulatory obligations, internal controls, operational processes, and technical implementation.

• Familiarity with financial services regulatory requirements, particularly DORA where applicable.

• Knowledge of relevant security standards and frameworks, such as ISO 27001, NIST CSF, and CIS Controls.

• Ability to collaborate with technical teams and understand how regulatory requirements apply to real systems and operational processes.

• Ability to manage multiple regulatory obligations and deadlines in a changing regulatory environment.

• Professional proficiency in English.

• We would appreciate it if you could share your Gallup test or similar assessment results, if available. You can find a dedicated link in the application form on the next page.

• Experience supporting DORA implementation or maintaining a regulatory obligations register.

• Familiarity with PCI DSS, GDPR, EBA guidance, or other requirements relevant to the organization's activities.

• Experience preparing evidence for regulatory inspections, external assessments, or compliance reviews.

• Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, or other compliance-related qualifications.

Responsibilities

1. 1

   ICT Regulatory Requirements: Identify, interpret, and maintain an up-to-date view of applicable ICT-related regulatory requirements, standards, and obligations relevant to the organization's business model.

2. 2

   Regulatory Change Management: Monitor relevant regulatory developments and assess their potential impact on the organization's technology, security, operational processes, and documentation.

3. 3

   Compliance Framework: Develop, maintain, and continuously improve the ICT compliance framework, including procedures, compliance methodologies, obligations registers, and supporting documentation.

4. 4

   Requirements Mapping: Translate regulatory obligations into clear internal requirements and map them to relevant policies, processes, controls, and accountable owners.

5. 5

   Compliance Assessments: Coordinate periodic assessments to determine whether relevant ICT requirements have been implemented and whether supporting evidence is available and adequate.

6. 6

   Compliance Gap Analysis: Identify gaps between regulatory expectations and current practices, document findings, agree remediation plans with responsible teams, and track progress.

7. 7

   Evidence and Documentation Management: Ensure that appropriate evidence of compliance is maintained, organized, traceable, and available for management reviews, regulatory requests, and external assessments.

8. 8

   Policy and Standard Management: Coordinate the review and maintenance of ICT-related policies, standards, procedures, and control documentation in collaboration with Cyber Security, ICT Risk, and relevant business owners.

9. 9

   DORA Compliance Support: Support the assessment and ongoing monitoring of applicable DORA requirements, including ICT risk management, incident-related obligations, resilience testing, third-party ICT risk, and relevant governance and reporting requirements.

10. 10

    Third-Party Compliance: Support compliance assessments relating to ICT service providers, outsourcing arrangements, contractual requirements, and applicable regulatory obligations.

11. 11

    Regulatory and External Assessments: Coordinate responses to regulatory inquiries, external compliance reviews, and assurance activities related to ICT, working with relevant subject matter experts and control owners.

12. 12

    Management Reporting: Prepare clear reports on compliance status, identified gaps, remediation progress, upcoming regulatory changes, and areas requiring management attention.

13. 13

    Stakeholder Coordination: Work with ICT Risk, Cyber Security, IT, Engineering, Operations, Legal, and broader Compliance teams to establish clear responsibilities and consistent approaches to compliance.

14. 14

    Continuous Improvement: Improve the efficiency and reliability of compliance processes, including regulatory mapping, evidence collection, control documentation, and remediation tracking.

Benefits & perks

• Real influence on shaping the ZEN.COM.
• Work in an environment where innovation and effectiveness truly matter.
• Private medical healthcare.
• Internal and external training opportunities.