Security Architect, GRC & Regulatory Strategy

Capital.com; Warszawa; On-site; PLN 240,000 - 420,000; Full time

Benefits offered by this job

Competitive Salary

Work-Life Harmony

Generous Time Off

Employee Referral Program

Comprehensive Health & PensionBenefits

Workation

Volunteer Days

Job summary

Capital.com is a global fintech company with over 1,000,000 clients worldwide. We are seeking a Security Architect to own the enterprise GRC framework across five regulated jurisdictions, shaping how we measure and reduce security risk and ensuring regulatory readiness.

This senior role combines security architecture, regulatory compliance, and executive risk advisory. Fluent English is essential, and a proven track record in regulated financial services will help you thrive in our fast‑paced,

Qualifications

• 8+ years in security with focus on GRC, regulatory compliance, risk management.
• Experience designing enterprise security architectures in regulated financial services.
• Deep command of ISO 27001 and PCI-DSS; working knowledge of DORA and NIS2.
• Multi-jurisdiction compliance experience; FCA or CySEC exposure a strong advantage.
• Fluent English, written and spoken.

Responsibilities

• Own the enterprise security GRC framework — policy hierarchy, risk register methodology, control ownership, and audit evidence structure.
• Map controls to DORA, NIS2, ISO 27001, and PCI-DSS, identify gaps, and set remediation priority.
• Act as the final authority on regulatory interpretation affecting security, including written positions for audits and regulatory submissions.
• Own the compliance and obligation management framework across all five regulated jurisdictions (FCA, CySEC, ASIC, SCB, SCA), including regulatory horizon scanning.
• Represent the company in regulatory discussions alongside the CISO and General Counsel where required.
• Define the company's human-risk philosophy and shape the security awareness architecture— segmentation, interventions, and measurement.
• Advise the CISO, CHRO, Risk, and Compliance teams on security risk, regulatory obligations, and investment trade-offs.
• Set the architectural standards the Corporate Security team executes against, and sign off on significant framework changes.
• Support Third-Party Risk Management and Business Continuity & Crisis Management from a security and technical perspective.

Skills

GRC

Regulatory compliance

Security architecture

ISO 27001

PCI-DSS

DORA

NIS2

Regulatory submissions

C-suite influence

English proficiency

Education

CISSP

CISM

CRISC

Job description

Capital.com is a global fintech company with over 1,000,000 clients worldwide. We are seeking a Security Architect to own the enterprise GRC framework across five regulated jurisdictions, shaping how we measure and reduce security risk and ensuring regulatory readiness.

This senior role combines security architecture, regulatory compliance, and executive risk advisory. Fluent English is essential, and a proven track record in regulated financial services will help you thrive in our fast‑paced,