Remote IT Compliance Lead - ISO 27001 & SOC 2 Expert

Arrise; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

ARRISE is seeking an experienced IT Compliance Specialist to lead ISO 27001 and SOC 2 programs for our iGaming support platforms. You will coordinate audits, manage risk assessments, and develop security policies across development, operations, and support teams.

The role requires 5+ years in IT compliance, strong audit experience, and the ability to respond to client security questionnaires. Remote work from Poland with global collaboration is expected.

Qualifications

• 5+ years’ IT compliance, GRC, risk management, or information security.
• Strong understanding of ISO 27001:2022 ISMS and SOC 2 criteria.
• Proven track record leading certification and audit processes with auditors.
• Experience responding to client security questionnaires.
• Experience with SaaS/PaaS, cloud hosting, APIs.
• Knowledge of secure SDLC, DevOps, and CI/CD compliance.
• Professional certifications preferred (CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).

Responsibilities

• Lead and maintain ISO 27001 ISMS and SOC 2 certification programs.
• Serve as the primary contact for auditors for ISO 27001 and SOC 2.
• Own audits: plan, collect evidence, provide audit responses.
• Manage risk assessments, control testing, remediation.
• Develop and enforce IT security/compliance policies and standards.
• Respond to client security questionnaires with accurate information.
• Oversee access control, change management, incident management, and third‑party risk.
• Ensure compliance across environments supporting software development, hosting, and APIs.
• Monitor control effectiveness and propose improvements.
• Liaise with auditors, regulators, and certification bodies.
• Build awareness of compliance requirements and provide training.
• Assess vendor and SLAs against ISO27001 and SOC2.
• Provide compliance updates and KPIs to management.

Skills

ISO 27001

SOC 2

Audits

GRC

Stakeholder management

Communication

Risk assessment

SaaS/PaaS

CI/CD security

Compliance training

Education

Bachelor's degree in information security

Degree in Computer Science or Risk Management

Job description

ARRISE is seeking an experienced IT Compliance Specialist to lead ISO 27001 and SOC 2 programs for our iGaming support platforms. You will coordinate audits, manage risk assessments, and develop security policies across development, operations, and support teams.

The role requires 5+ years in IT compliance, strong audit experience, and the ability to respond to client security questionnaires. Remote work from Poland with global collaboration is expected.