Compliance Consultant

Location: Europe, Ukraine

Company

IT company seeking to strengthen governance, risk, and compliance practices across an international environment.

What you will do

• Lead compliance projects aligned with ISO, SOC 2, NIST, PCI DSS, GDPR, HIPAA, DORA, and OWASP SAMM frameworks.
• Develop and maintain compliance policies, procedures, guidelines, and related documentation.
• Plan and conduct internal compliance and security audits, document findings, and track follow-up actions.
• Translate regulatory and framework requirements into practical controls and corrective or preventive actions.
• Collaborate with stakeholders on risk assessments, control definition, customer due diligence, and certification activities.
• Develop compliance training and awareness programs and advise on complex compliance requests, incidents, and complaints.

Requirements

• 3+ years of experience in compliance management and implementation, preferably in IT, consulting, or related fields.
• Knowledge of several relevant standards and regulations, including ISO 27001, ISO 27701, ISO 22301, ISO 13485, SOC 2, NIST CSF, PCI DSS, GDPR, HIPAA, and DORA.
• Experience interpreting compliance requirements and converting them into policies, controls, and procedures.
• Experience planning, conducting, reporting on, and following up after compliance or security audits and assessments.
• Strong understanding of information security, risk management, and data protection, plus strong documentation, presentation, and communication skills.
• Upper-Intermediate English and proficiency in Ukrainian required.

Nice to have

• Knowledge of OWASP frameworks.
• Hands-on experience implementing OWASP SAMM in real projects.
• Professional certification such as CISA, CISM, CISSP, or similar.

Culture & Benefits

• Work in cross-functional, distributed teams.
• Opportunity to drive continuous improvements in compliance and security controls.
• Focus on a strong compliance and security culture through employee awareness and training.
• Independent ownership of initiatives and responsibility for completing complex projects.