Head of IT Compliance

Arrise
Poland
Workplace: RemoteFull timeFunction: Legal, Risk & ComplianceExperience: 5+ yearsEducation: bachelorsSkills: ["Communication","Stakeholder management","Cross-functional influence","Analytical thinking","Detail orientation"]

Lead and manage IT compliance programs across ISO 27001 and SOC 2, ensuring security, privacy, and regulatory compliance for gaming platform services. Serve as the primary liaison for external and internal auditors, planning and coordinating certification and attestation, owning audits and evidence responses, and managing risk assessments and control remediation. Oversee policies, control implementation across environments, client security questionnaires, vendor risk compliance, and compliance reporting and readiness reviews.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Arrise
Arrise
4 days ago

Head of IT Compliance

âś“ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 20 hours agoStatus: Live

Job Summary

Lead and manage IT compliance programs across ISO 27001 and SOC 2, ensuring security, privacy, and regulatory compliance for gaming platform services. Serve as the primary liaison for external and internal auditors, planning and coordinating certification and attestation, owning audits and evidence responses, and managing risk assessments and control remediation. Oversee policies, control implementation across environments, client security questionnaires, vendor risk compliance, and compliance reporting and readiness reviews.
Location: Poland
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Sr. Director level

Key Responsibilities

  • •Lead and maintain ISO 27001 ISMS and SOC 2 certification/attestation programs.
  • •Act as the primary liaison for external and internal auditors and facilitate ISO 27001 certification and SOC 2 attestation.
  • •Own compliance audits: plan, coordinate with auditors, collect evidence, and deliver audit responses.
  • •Develop, maintain, and enforce IT security and compliance policies aligned to ISO 27001 Annex A and SOC 2 requirements; respond to client security questionnaires.
  • •Oversee access control, change management, incident management, and third-party/vendor risk management; monitor control effectiveness and manage compliance findings to closure.

Key Requirements

  • •Bachelor’s degree in Information Security, Computer Science, Risk Management, or a related field.
  • •5+ years’ experience in IT compliance, GRC, risk management, or information security, ideally in gaming, fintech, or other regulated industries.
  • •Strong understanding of ISO 27001:2022 ISMS and SOC 2 Trust Services Criteria, including direct experience with certification and audit processes.
  • •Experience responding to client security questionnaires and communicating compliance status effectively.
  • •Knowledge of secure SDLC and compliance integration with DevOps and CI/CD; professional certifications preferred (e.g., CISA, CISM, ISO 27001 Lead Implementer/Auditor, CCSK, CRISC).
Experience:5+ yearsGamingFintechRegulated industries
Education:Bachelor's in Information Security, Computer Science, Risk Management, or a related field
Skills:CommunicationStakeholder managementCross-functional influenceAnalytical thinkingDetail orientation
Certifications:CISACISMISO 27001 Lead Implementer/AuditorCCSKCRISC
Tech Stack:ISO 27001ISO 27001:2022SOC 2SOC 2 Trust Services CriteriaISO 27001 Annex ASaaSPaaSAPIsCloud hostingSecure SDLCDevOpsCI/CD

Company Brief

Arrise
Arrise provides a cloud platform that helps property owners, facilities teams and compliance managers centralize building safety, maintenance and regulatory documentation, automate inspections and workflows, and streamline reporting to reduce risk and ensure operational compliance.
Industry: Facility Management
Website