IT Risk & Compliance Consultant

Jobtailor; Katowice; On-site; PLN 120,000 - 180,000; Full time

Job summary

Jobtailor in Poland is hiring an IT Regulatory & Compliance Specialist to design, review and implement frameworks such as ISO 27001, PCI DSS, GDPR, and NIST CSF. You will map controls and support audit readiness for healthcare, finance, and e-commerce clients.

You will perform risk assessments, develop remediation roadmaps, and collaborate with IT, security and business stakeholders to deliver compliant, secure operations.

Qualifications

• University degree in information technology, computer science, cybersecurity or related field.
• 3–5 years of relevant experience in IT risk, cybersecurity, compliance or assurance.
• English working proficiency (B2+) and at least one additional language (FR/DE/ES/NL/IT).
• Experience in ISO 27001, PCI DSS, HIPAA/HITRUST or other regulatory compliance projects.
• Ability to interpret regulatory requirements and translate them into risk-based controls.

Responsibilities

• Support design and review of IT regulatory and compliance frameworks (ISO 27001, NIST CSF, PCI DSS, GDPR, COBIT, ITIL).
• Perform maturity, gap assessments and control mapping.
• Develop remediation roadmaps and audit readiness documentation.
• Assist ISO 27001 programs, ISMS scoping, risk assessments and statements of applicability.
• Support PCI DSS assessments and healthcare data compliance projects.

Skills

IT Regulatory Compliance

Risk Assessment

Control Mapping

Audit Readiness

Cybersecurity Frameworks

Documentation Skills

Analytical Skills

Communication Skills

English Proficiency

Multilingual (FR/DE/ES/NL/IT)

Education

University degree in IT / CS / Cybersecurity

Tools

NIST CSF

COBIT

ITIL

GDPR

DORA

NIS2

Job description

• Support design and review of IT regulatory and compliance frameworks across ISO 27001, NIST CSF, PCI DSS, HIPAA, HITRUST, GDPR, COBIT and ITIL
• Perform cyber/IT maturity assessments, gap assessments and control mapping
• Develop remediation roadmaps
• Assist with ISO 27001 programs, including ISMS scoping, risk assessment, Statement of Applicability, control implementation and audit readiness
• Support PCI DSS assessments, including cardholder data environment reviews, security controls and evidence preparation
• Contribute to HIPAA/HITRUST and regulated-data compliance projects in healthcare and life sciences
• Draft policies, standards, governance frameworks, RACI models and senior management reports
• Identify control gaps and support remediation planning and execution
• Collaborate with IT, security, compliance and business stakeholders to deliver audit-ready documentation
• Deliver IT regulatory compliance, cybersecurity maturity and IT control framework services to global clients

Requirements

• 3–5 years of relevant experience in IT risk, cybersecurity, compliance or assurance
• A university degree in Information Technology, Computer Science, Cybersecurity or a related field
• English working proficiency (B2 and above)
• Working proficiency (B2 and above) in at least one additional language: French, German, Spanish, Dutch or Italian
• Working experience in ISO 27001 implementation or audit, PCI DSS or payment security assessments, HIPAA/HITRUST or healthcare compliance, or IT regulatory compliance/external assurance engagements
• Understanding of at least one of: ISO 27001/ISMS, NIST CSF or NIST 800-53, PCI DSS/payment security, GDPR/data protection, COBIT, ITIL, DORA, NIS2
• Background in IT risk, cybersecurity, compliance, audit or advisory
• Experience in at least one listed industry: banking, payments, financial services, healthcare, pharma, retail, e-commerce, energy, utilities, transport, telecom or critical infrastructure
• At least one certification: ISO 27001, ISO 27005 or ISO 31000
• Strong analytical and problem-solving skills
• Ability to interpret regulatory requirements and translate them into risk-based controls
• Strong communication and documentation skills
• Ability to prioritize and execute tasks in a high-pressure environment

Core Competencies

Demonstrates expertise in IT regulatory compliance frameworks, including ISO 27001, PCI DSS, and HIPAA, with a strong focus on risk assessment, control implementation, and audit readiness. Proficient in developing remediation roadmaps and collaborating with stakeholders to ensure compliance and cybersecurity maturity.

Highest-signal resume keywords

• ISO 27001 Implementation
• PCI DSS Assessment
• HIPAA Compliance
• Cybersecurity Maturity Assessment
• Risk Assessment

ATS Optimization Keywords

Hard Skills

• IT Regulatory Compliance
• Control Mapping
• Remediation Roadmap Development
• ISMS Scoping
• Audit Readiness
• Data Protection
• Governance Frameworks
• Risk-Based Controls
• Cybersecurity Frameworks
• Compliance Frameworks

Soft Skills

• Analytical Skills
• Problem-Solving Skills
• Communication Skills
• Documentation Skills
• Task Prioritization

Certifications & Qualifications

• ISO 27001
• ISO 27005
• ISO 31000

Industry Keywords

• Healthcare
• Financial Services
• Pharma
• E-Commerce
• Telecom

Tools & Technologies

• NIST CSF
• COBIT
• ITIL
• GDPR
• DORA
• NIS2