Senior IT Compliance Specialist

• Analyse regulations and understand their scope, tangible requirements, risks and impact on TME's business and IT systems
• Creation of compliance frameworks, control definitions, policies, standards, risks and requirements
• Lead the design and implementation of compliance and risk management processes
• Manage cross-company IT compliance projects
• Monitor the regulatory and risk landscape for IT compliance
• Monitor, and report on, the implementation and operation of compliance in IT systems
• Perform risk assessments, analyse and resolve compliance issues and risks
• Provide compliance guidance and support to IT and business teams across the company
• Support the definition of IT compliance strategy and plans

Key requirements:

• Degree in IT, law or business, preferably with a compliance or regulation element
• At least 5 years' experience in IT compliance and risk management
• Expert knowledge of IT governance, risk and compliance, regulations and industry standards (e.g. GDPR, ISO 27001, AI Act, Cyber Resilience Act)
• Good knowledge of IT architecture and cybersecurity, including basic knowledge of cybersecurity frameworks (e.g. NIST)
• Basic project management skills
• Analytical problem-solving mindset
• Strong teamwork and collaboration in an international environment
• Customer-oriented communication
• Proactive learning attitude
• Adaptability
• Excellent spoken and written English
• Knowledge of IT GRC tools (e.g. AuditBoard, OneTrust) and reporting tools (e.g. Excel, PowerBI)

Nice to have:

• Qualifications in IT compliance and risk management (e.g. GRCP, CISA, CGRC, CRISC, IT Risk Fundamentals Certificate)
• Qualifications in relevant ISO standards (e.g. ISO 27001, 27701, 27005)
• Qualifications in relevant regulations (e.g. CIPP, CIPM, CIPT)
• Qualifications in cybersecurity (e.g. CISSP, GSEC, GIAC certifications)