ICT Compliance Expert (Poland/Remote)

ZEN; Polska; Híbrido; PLN 180.000 - 280.000; Tempo integral

Benefícios oferecidos por esta vaga

Private medical healthcare

Competitive salary

Flexible working conditions

Training opportunities

Resumo da vaga

ZEN.COM is a smart financial app designed for everyday life. We seek an ICT Compliance Expert to translate regulatory requirements into internal obligations and drive ongoing ICT compliance across our fintech organization, working with Cyber Security, ICT Risk, IT, Engineering, Operations and Legal teams.

The role emphasizes regulatory interpretation, evidence management, and continuous monitoring, without replacing operational control ownership. English proficiency required.

Qualificações

• Experience in ICT compliance, regulatory compliance, technology governance, information security compliance, or related field.
• Experience in fintech, payments, banking, or other regulated financial services environments.
• Understanding ICT environments, information security principles, and practical controls.
• Ability to translate regulatory requirements into actionable internal obligations.
• Experience with compliance assessments, gap analyses, and remediation tracking.

Responsabilidades

• Identify, interpret, and maintain ICT regulatory requirements and obligations.
• Monitor regulatory developments and assess impact on tech, security, and processes.
• Develop and improve the ICT compliance framework and evidence documentation.
• Translate obligations into internal requirements mapped to policies and controls.
• Coordinate periodic assessments and track remediation progress.
• Ensure evidence is maintained for regulatory requests and external reviews.
• Coordinate policy and standard reviews with cross‑functional teams.
• Support DORA compliance, ICT risk, incident obligations, and governance.
• Assist with third‑party ICT risk, outsourcing, and regulatory responses.
• Prepare management reports on compliance status and changes.

Conhecimentos

ICT compliance

Regulatory compliance

Fintech compliance

Regulatory mapping

Evidence management

Policy maintenance

DORA knowledge

ISO 27001

NIST CSF

Descrição da vaga

ZEN.COM is a smart financial app designed for your everyday life – at home and on the go. We make payments, online shopping, and personal finance management fast, secure, and effortless. With ZEN.COM, you can enjoy cashback on purchases, full control over your spending, and peace of mind thanks to purchase protection. A built-in multi-currency account lets you spend abroad or shop internationally with great exchange rates and no hidden fees.

We are looking for an ICT Compliance Expert to support the implementation, maintenance, and monitoring of ICT-related regulatory and compliance requirements across our fintech organization.
The role will be responsible for translating applicable regulatory requirements, standards, and internal policies into clear obligations, implementation expectations, and evidence requirements. The successful candidate will work closely with Cyber Security, ICT Risk, IT, Engineering, Operations, and Legal or Compliance teams to ensure that relevant requirements are understood, implemented by the appropriate owners, documented, and monitored.
The position requires a structured and pragmatic approach to regulatory compliance, with a strong understanding of technology environments and the ability to work effectively with technical stakeholders.
This is a specialist compliance role focused on regulatory interpretation, compliance coordination, evidence management, and ongoing compliance monitoring. It is not intended to replace the operational ownership of technical controls or the independent assurance responsibilities of Internal Audit.

Requirements:

• Experience in ICT compliance, regulatory compliance, technology governance, information security compliance, or a related field.
• Experience in fintech, payments, banking, or another regulated financial services environment.
• Understanding of ICT environments, information security principles, technology operations, and the practical implementation of technical and organizational controls.
• Experience interpreting regulatory requirements and translating them into actionable internal obligations.
• Practical experience conducting compliance assessments, gap analyses, control mapping, and remediation tracking.
• Experience maintaining policies, procedures, compliance registers, and supporting evidence.
• Understanding of the relationship between regulatory obligations, internal controls, operational processes, and technical implementation.
• Familiarity with financial services regulatory requirements, particularly DORA where applicable.
• Knowledge of relevant security standards and frameworks, such as ISO 27001, NIST CSF, and CIS Controls.
• Ability to collaborate with technical teams and understand how regulatory requirements apply to real systems and operational processes.
• Ability to manage multiple regulatory obligations and deadlines in a changing regulatory environment.
• Professional proficiency in English.
• We would appreciate it if you could share your Gallup test or similar assessment results, if available.

Nice to have:

• Experience supporting DORA implementation or maintaining a regulatory obligations register.
• Familiarity with PCI DSS, GDPR, EBA guidance, or other requirements relevant to the organization's activities.
• Experience preparing evidence for regulatory inspections, external assessments, or compliance reviews.
• Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISA, or other compliance-related qualifications.

Responsibilities:

• ICT Regulatory Requirements: Identify, interpret, and maintain an up-to-date view of applicable ICT-related regulatory requirements, standards, and obligations relevant to the organization's business model.
• Regulatory Change Management: Monitor relevant regulatory developments and assess their potential impact on the organization's technology, security, operational processes, and documentation.
• Compliance Framework: Develop, maintain, and continuously improve the ICT compliance framework, including procedures, compliance methodologies, obligations registers, and supporting documentation.
• Requirements Mapping: Translate regulatory obligations into clear internal requirements and map them to relevant policies, processes, controls, and accountable owners.
• Compliance Assessments: Coordinate periodic assessments to determine whether relevant ICT requirements have been implemented and whether supporting evidence is available and adequate.
• Compliance Gap Analysis: Identify gaps between regulatory expectations and current practices, document findings, agree remediation plans with responsible teams, and track progress.
• Evidence and Documentation Management: Ensure that appropriate evidence of compliance is maintained, organized, traceable, and available for management reviews, regulatory requests, and external assessments.
• Policy and Standard Management: Coordinate the review and maintenance of ICT-related policies, standards, procedures, and control documentation in collaboration with Cyber Security, ICT Risk, and relevant business owners.
• DORA Compliance Support: Support the assessment and ongoing monitoring of applicable DORA requirements, including ICT risk management, incident-related obligations, resilience testing, third-party ICT risk, and relevant governance and reporting requirements.
• Third-Party Compliance: Support compliance assessments relating to ICT service providers, outsourcing arrangements, contractual requirements, and applicable regulatory obligations.
• Regulatory and External Assessments: Coordinate responses to regulatory inquiries, external compliance reviews, and assurance activities related to ICT, working with relevant subject matter experts and control owners.
• Management Reporting: Prepare clear reports on compliance status, identified gaps, remediation progress, upcoming regulatory changes, and areas requiring management attention.
• Stakeholder Coordination: Work with ICT Risk, Cyber Security, IT, Engineering, Operations, Legal, and broader Compliance teams to establish clear responsibilities and consistent approaches to compliance.
• Continuous Improvement: Improve the efficiency and reliability of compliance processes, including regulatory mapping, evidence collection, control documentation, and remediation tracking.

What we offer:

• Real influence on shaping the ZEN.COM.
• Work in an environment where innovation and effectiveness truly matter.
• Competitive salary and flexible working conditions.
• Private medical healthcare.
• Internal and external training opportunities.