Owning and maintaining the IT compliance framework covering NIS2, ITGC, and ISO/IEC 27001:
2022
Designing and operating an integrated compliance program with risk-based reporting to management and external stakeholders
Ensuring IT controls are properly designed, implemented, documented, and operating effectively
Coordinating internal and external audits and acting as the primary contact for auditors and regulatory bodies
Collaborating cross-functionally with Legal, Procurement, Finance, HR, and product/solution owners to translate regulatory requirements into practical controls
Ensuring ITGC governance is followed, including coordination of control execution, evidence collection, and remediation activities
Supporting alignment between OT security requirements and NIS2 / ISO standards
Delivering quarterly compliance dashboards and insights to IT Leadership and Group Leadership teams
Contributing to strategic decision-making through clear reporting and recommendations
What You Bring
Strong experience working with IT compliance, cybersecurity governance, or risk management
Hands-on knowledge of NIS2, IT General Controls (ITGC), and
ISO/IEC 27001:
2022
Experience coordinating audits and working with auditors and regulatory authorities
Ability to design and operationalize compliance frameworks in complex IT environments
Strong collaboration skills with the ability to work across technical and non-technical functions
Clear and concise communication skills, suitable for both leadership and operational stakeholders
Structured, detail-oriented, and pragmatic working style
Ability to translate regulatory requirements into business-friendly and scalable solutions