Compliance Operations Officer

Join and be responsible for supporting the compliance team in day-to-day activities, ensuring that security controls are properly executed, documentation stays current, and incidents are resolved efficiently.

Acts as the operational backbone of the compliance team — bridging policy and practice, technology and process, documentation and execution. Do the work that keeps ISMS running at the operational layer.

Attracts extraordinary people who want to do their best work. Make a real impact with the following responsibilities:

Náplň práce, právomoci a zodpovednosti

• Perform daily security operations tasks by executing and monitoring security controls.
• Review and validate user access rights (access reviews, entitlement certifications).
• Monitor security dashboards and ensure security controls are operating as intended.
• Escalate control failures or anomalies to the team lead or relevant stakeholders.
• Maintain and update security process documentation, ensuring it reflects current practices and regulatory expectations.
• Keep process artifacts aligned with standards such as ISO 27001, ISO 42001, GDPR, NIS2, and DORA.
• Prepare internal and external security reports (e.g., access review summaries, control monitoring reports, KPI dashboards).
• Support the deployment and continuous improvement of security and compliance processes.
• Assist in the detection, triage, and resolution of security incidents, including evidence collection, remediation tracking, and post-incident reviews.
• Document incident details, contribute to post-incident reviews and lessons learned, and support the implementation of corrective actions to prevent recurrence.

Skills and qualifications

• At least 2 years of experience in IT security operations, compliance, or a related role.
• University degree in information security, IT, or a related field (can be substituted with relevant practical experience).
• Practical experience with identity and access management (IAM) systems.
• Familiarity with security operations concepts (access reviews, incident response, security monitoring).
• Good understanding of security controls and how they map to standards (ISO 27001, GDPR, NIS2).
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Strong attention to detail and ability to perform repetitive operational tasks with consistency.
• Comfortable working with documentation, reports, and questionnaires.