IT Assurance and Compliance Specialist

Capital.com; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Competitive salary

Work-life harmony

Annual performance bonus

Generous time off

Employee referral program

Health & pension benefits

Remote work 30 days

Volunteer days

Job summary

Capital.com, a leading trading platform expanding globally, seeks an IT Assurance & Compliance professional in Warsaw. This role sits at the intersection of technology, regulation, and business, translating regulatory obligations into practical controls within a fintech environment.

Responsibilities include owning end-to-end preparation for IT audits and regulatory reviews—evidence gathering, coordinating with tech teams, and delivering complete audit packages; conducting gap assessments; and

Qualifications

• 4+ years in IT compliance, IT audit, or information security governance.
• Experience in FinTech, crypto, payment or another regulated financial services area.
• Hands-on gap assessments and remediation planning, not just documenting findings.
• Knowledge of multiple frameworks and how they interact across jurisdictions.

Responsibilities

• Own end-to-end preparation for IT audits and regulatory reviews—evidence gathering, coordination with tech teams, and timely delivery of complete audit packages.
• Conduct gap assessments against new regulatory requirements—document findings and propose remediation plans with clear owners and deadlines.
• Act as the subject-matter expert for IT compliance questions across the Company—translate regulatory requirements into practical implementation guidance for technical teams.
• Draft and maintain audit-ready documentation across all IT Assurance & Compliance activities, including evidence repositories and compliance registers.
• Draft, review, and contribute to IT and Security policies, standards, and procedures—providing IT compliance input to ensure alignment with regulatory requirements and practical applicability across teams.

Skills

IT compliance

IT audit

information security

regulatory knowledge

Tools

ISO27001

SOC 2

DORA

Job description

We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talented team.

IT Assurance & Compliance sits at the intersection of technology, regulation, and business — translating regulatory obligations into controls that work in a fast-moving fintech environment. This role owns IT audit readiness, gap assessments, and day-to-day IT Assurance & Compliance work.

Responsibilities:

• Own end-to-end preparation for IT audits and regulatory reviews — evidence gathering, coordination with tech teams, and timely delivery of complete audit packages;
• Conduct gap assessments against new regulatory requirements — document findings and propose remediation plans with clear owners and deadlines;
• Act as the subject-matter expert for IT compliance questions across the Company — translate regulatory requirements into practical implementation guidance for technical teams;
• Draft and maintain audit-ready documentation across all IT Assurance & Compliance activities, including evidence repositories and compliance registers;
• Draft, review and contribute to IT and Security policies, standards, and procedures — providing IT compliance input to ensure alignment with regulatory requirements and practical applicability across teams

Requirements:

• 4+ years in IT compliance, IT audit, or information security governance;
• Experience in FinTech, crypto, payment or another regulated financial services area;
• Hands-on experience conducting gap assessments and building remediation plans — not just documenting findings, but driving them to closure;
• Working knowledge of at least two of: DORA, ISO27001, SOC 2, or similar frameworks; awareness of how they interact in a multi-jurisdiction environment is a plus;
• Ability to work independently on complex, ambiguous IT compliance tasks;
• Strong communication skills — able to translate regulatory requirements into practical terms for technical teams and present compliance positions clearly to regulators and senior stakeholders;
• Attention to detail that extends to documentation: evidence packages, policy versions, control registers

What you will get in return:

• Competitive Salary: We believe great work deserves great pay! Your skills and talents will be rewarded with a salary that makes you feel valued and motivated
• Work-Life Harmony: Join a company that genuinely cares about you—because your life outside of work matters just as much as your time on the clock
• Annual Performance Bonus: Your hard work doesn’t go unnoticed! Celebrate your achievements with a well-deserved annual bonus tied to your performance
• Generous Time Off: Need a breather? Our annual leave policy lets you recharge and enjoy life outside of work without a worry
• Employee Referral Program: Love working here? Share the love! Bring your talented friends on board and get rewarded for growing our awesome team
• Comprehensive Health & Pension Benefits: From medical insurance to pension plans, we’ve got your back. Plus, location-specific benefits and perks!
• Workation Wonderland: Live your digital nomad dreams with 30 extra days to work remotely from anywhere in the world (some restrictions apply). Adventure awaits!
• Volunteer Days: Make a difference! Take two additional paid days each year to support causes you care about and give back to the community

Be a key player at the forefront of the digital assets movement, propelling your career to new heights! Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.