Tech Head of IT Compliance Remote, Poland 4d ago

Arrise; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

ARRISE is seeking an experienced IT Compliance Specialist to lead ISO 27001 and SOC 2 programs for our iGaming support platforms. You will coordinate audits, manage risk assessments, and develop security policies across development, operations, and support teams.

The role requires 5+ years in IT compliance, strong audit experience, and the ability to respond to client security questionnaires. Remote work from Poland with global collaboration is expected.

Qualifications

• 5+ years’ IT compliance, GRC, risk management, or information security.
• Strong understanding of ISO 27001:2022 ISMS and SOC 2 criteria.
• Proven track record leading certification and audit processes with auditors.
• Experience responding to client security questionnaires.
• Experience with SaaS/PaaS, cloud hosting, APIs.
• Knowledge of secure SDLC, DevOps, and CI/CD compliance.
• Professional certifications preferred (CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).

Responsibilities

• Lead and maintain ISO 27001 ISMS and SOC 2 certification programs.
• Serve as the primary contact for auditors for ISO 27001 and SOC 2.
• Own audits: plan, collect evidence, provide audit responses.
• Manage risk assessments, control testing, remediation.
• Develop and enforce IT security/compliance policies and standards.
• Respond to client security questionnaires with accurate information.
• Oversee access control, change management, incident management, and third‑party risk.
• Ensure compliance across environments supporting software development, hosting, and APIs.
• Monitor control effectiveness and propose improvements.
• Liaise with auditors, regulators, and certification bodies.
• Build awareness of compliance requirements and provide training.
• Assess vendor and SLAs against ISO27001 and SOC2.
• Provide compliance updates and KPIs to management.

Skills

ISO 27001

SOC 2

Audits

GRC

Stakeholder management

Communication

Risk assessment

SaaS/PaaS

CI/CD security

Compliance training

Education

Bachelor's degree in information security

Degree in Computer Science or Risk Management

Job description

We are seeking an experienced IT Compliance Specialist to lead and manage our compliance programs across ISO 27001 and SOC 2, ensuring our gaming platform and related services meet the highest standards of security, privacy, and regulatory compliance. The role will serve as the primary liaison for both external and internal auditors for ISO 27001 certification and SOC 2 attestation, with a focus on addressing scope changes, corporate structure changes, and responding to client security questionnaires.

What you will do

• Compliance Management
  • Lead and maintain the company’s ISO 27001 Information Security Management System (ISMS) and SOC 2 Trust Services Criteria certification programs.
  • Serve as the primary point of contact for engaging with external and internal auditors, facilitating ISO 27001 certification and SOC 2 attestation processes.
  • Own compliance audits: plan, coordinate with auditors, collect evidence, and provide comprehensive audit responses.
  • Manage risk assessments, control testing, and remediation activities to ensure ongoing compliance.
• Policy & Process Governance
  • Develop, maintain, and enforce IT security and compliance policies, procedures, and standards.
  • Ensure documentation aligns with ISO 27001 Annex A controls, SOC 2 requirements, and addresses evolving compliance needs due to scope or structural changes.
  • Respond to client security questionnaires with accurate and detailed information to demonstrate compliance
• Control Implementation & Monitoring
  • Oversee access control, change management, incident management, and third-party/vendor risk management within the scope of ISO 27001 and SOC 2.
  • Ensure compliance across environments supporting software development, hosting platforms, and APIs.
  • Monitor the effectiveness of security controls and recommend improvements to mitigate emerging risks.
• Audit & Assurance
  • Act as the central liaison for external auditors, regulators, and certification bodies, ensuring clear communication and issue resolution.
  • Conduct internal compliance audits, gap assessments, and readiness reviews to maintain certification readiness.
  • Track and close compliance findings and audit issues, ensuring timely resolution and documentation.
  • Provide expert guidance on compliance implications of ISO 27001 scope changes and corporate structure changes.
• Build awareness of compliance requirements across development, operations, and support teams.
• Deliver targeted training on compliance obligations, including secure software development, data handling, and gaming industry standards.
• Vendor & Third-Party Risk Management
• Assess compliance of key vendors, including cloud hosting providers, content partners (e.g., Pragmatic Play), and integration providers.
• Ensure contractual and SLA alignment with ISO 27001 and SOC 2 requirements.
• Reporting
  • Provide regular compliance updates, risk posture reports, and responses to client inquiries to senior management and stakeholders.
  • Support management with compliance performance metrics and KPIs.

What you bring

• Bachelor's degree in information security, Computer Science, Risk Management, or a related field.
• 5+ years’ experience in IT compliance, GRC, risk management, or information security, ideally in gaming, fintech, or other regulated industries.
• Strong understanding of:
• ISO 27001:2022 Information Security Management System (ISMS)
• SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, Privacy)
• Proven track record of leading certification and audit processes, including direct engagement with auditors.
• Experience responding to client security questionnaires and communicating compliance status effectively.
• Experience with SaaS/PaaS environments, APIs, and cloud-based hosting services.
• Knowledge of secure SDLC, DevOps, and CI/CD compliance integration.
• Professional certifications preferred (e.g., CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).
• Excellent knowledge of IT compliance, audit, and risk frameworks, with expertise in ISO 27001 and SOC 2.
• Strong communication and stakeholder management skills, with the ability to represent the company to auditors and clients.
• Ability to influence cross-functional teams (dev, ops, support) to adopt compliance practices.
• Analytical thinker with a problem-solving approach to compliance challenges, including scope and structural changes.
• Detail-oriented with strong documentation, evidence management, and client questionnaire response skills.

About us

ARRISE is a global leader in software development and services for the iGaming industry, bringing together more than 2,500 professionals operating across more than 12 locations worldwide.

From concept through to delivery, we combine technical expertise, creativity and industry knowledge to develop products, platforms and services that shape player experiences and support some of the industry's leading brands.

We are best known for the work we deliver for Pragmatic Play, creating and supporting technology, products and specialists services enjoyed by millions of players worldwide.

ARRISE is the company behind the games, the presenters, the studios and the platform 2,500+ people across 12 countries build and run the live entertainment that millions of players see every day.

We hire people to own their work. If you need a brief for every decision, this will not suit you. If you want the room to make the call and the accountability that comes with it, it will.

Frequently asked questions

Where is this role based?

This role is based in Remote, Poland and follows a remote working pattern.

The working language for this role is English.

Can I ask for an adjustment during the hiring process?

Yes. If you need an adjustment at any stage of the process, tell your recruiter and we will arrange it.

Are there other open roles at ARRISE?

Yes. You can search every open role by team, location and working pattern on our careers page.

ARRISE is an equal opportunity employer. We consider every applicant on merit, regardless of age, disability, gender identity, marital status, pregnancy, race, religion, sex or sexual orientation. If you need an adjustment at any stage of the process, tell your recruiter and we will arrange it.

Ready to make an impact?

Explore opportunities across our global teams and locations.