Regulatory Compliance Manager

emagine Polska; Warszawa; On-site; PLN 248,000 - 276,000; Full time

Job summary

emagine Polska seeks a Regulatory Compliance Manager in Warsaw to translate complex regulations into actionable requirements and embed compliance across information security and emerging technology teams.

You will focus on NIS2 with AI governance, ensuring global and local requirements are reflected in governance, security, and operational measures. The role supports four days a week onsite and offers opportunities to align regulatory efforts with business operations.

Qualifications

• Strong understanding of regulatory compliance and governance.
• Ability to translate regulations into actionable controls and programs.
• Experience developing governance frameworks in large tech environments.

Responsibilities

• Maintain an overview of regulations affecting information security and technology (e.g., NIS2, AI Act) and coordinate with owners.
• Maintain the NIS2 coordinator network.
• Assess new regulatory requirements and their impact on security, risk and technology.
• Translate regulatory obligations into policies, controls, and roadmaps.

Skills

Regulatory compliance

Information security governance

Cyber security governance

IT risk

IT audit

Education

Educational background in information security or risk management

Job description

PROJECT INFORMATION

Start: ASAP (flexible).

Rate: 180-200 PLN/h.

Contract: B2B 6 months + possible prolongations.

Onsite: 4 days per week

Location: Warsaw.

Project language: English.

Business trips: some occasional included.

Recruitment process: 2 interviews.

About a role

As Regulatory Compliance Manager, you will translate complex technology and information security regulations into clear, actionable requirements, embed compliance in everyday operations, and navigate through an evolving regulatory landscape. The role is central to regulatory compliance efforts across information security and emerging technology. With NIS2 as the primary focus, you will contribute to AI governance and ensure that global and local requirements are reflected in practical governance, security, and operational measures. You will have ownership of your area with the flexibility to explore the best way forward, based on ongoing initiatives. The goal is to create clarity and traceability without adding unnecessary complexity, while considering operational and business needs. You will join the Security Governance & Risk team within Group Information Security & Compliance. This diverse team works collaboratively, with an emphasis on informal dialogue, as we operate from the office four days a week. In this role, you will connect regulatory requirements with technological, security, and business operations.

Responsibilities

• Maintain an internal overview of relevant regulations impacting information security & technology (e.g. NIS2, AI Act, CER directive, Cyber Resilience Act) and collaborate with internal owners of these regulations.
• Maintain the existing NIS2 coordinator network.
• Assess new regulatory requirements and their impact on the security, risk, and technology landscape.
• Translate regulatory obligations into practical controls, frameworks, policies, and implementation roadmaps.
• Support legal assessments and gap analyses across local information security officers.
• Assist with the NIS2 initiative organization-wide and ensure alignment with implementation.
• Prepare compliance reporting and regular updates for senior management and audit committees.
• Monitor regulatory developments, provide recommendations on required actions.
• Maintain compliance documentation and evidence for internal and external audits.
• Support the development of an AI governance framework, including policies, guidelines, and awareness activities.

Requirements

• Strong understanding of regulatory compliance, information security governance, cyber security governance, IT risk, IT audit, or a related field.
• An educational background in information security, risk management, business administration, or business law is beneficial; what is crucial is your capability to grasp regulation and operationalize it within a large technology environment.
• Being familiar with regulations and frameworks, including NIS2, the AI Act, ISO 27001 and understand the interplay between regulatory requirements and technical/operational controls.
• Experience in developing policies, guidelines, or governance frameworks within a complex global organization is an advantage.

Personal traits

• Strong professional judgement, ownership, curiosity, and a business focus, Abiliy to effectively engaging others and ensuring project completion.