Compliance Consultant

About the Position

Compliance Consultant

Middle Remote

Ukraine

Sigma Software is looking for a Compliance Consultant to strengthen our governance, risk, and compliance practices. In this role, you will work with a wide range of international standards and regulations (such as ISO 27001, SOC 2, GDPR, and others), translating them into clear, practical controls, policies, and processes. You will conduct audits and assessments, advise stakeholders on compliance risks, support certification and customer due diligence activities, and contribute to awareness and training initiatives.

This position is a great fit for a specialist who enjoys working at the intersection of information security, regulations, and business needs, and who is ready to drive tangible improvements in a dynamic IT environment.

Responsibilities

• Lead and oversee compliance projects in accordance with relevant standards and frameworks (e.g., ISO 27001, ISO 27701, ISO 22301, ISO 13485, SOC2, NIST CSF, PCI DSS, GDPR, HIPAA, DORA, OWASP SAMM)
• Develop, implement, and maintain comprehensive compliance policies, procedures, and guidelines aligned with regulatory and framework requirements
• Conduct comprehensive internal audits and assessments to ensure regulatory and framework compliance, documenting findings and non-conformities
• Provide clear, actionable recommendations for corrective and preventive actions and support stakeholders in implementing them
• Collaborate with stakeholders to perform risk assessments and define appropriate controls
• Develop, update, and implement advanced compliance training programs for employees
• Support and enhance the compliance awareness program, promoting a strong compliance and security culture across the organization
• Investigate, resolve, and provide guidance on complex compliance-related requests, incidents, and complaints

Requirements

• 3+ years of experience in compliance management and implementation, preferably in IT, consulting, or related fields
• Proficiency in some of the following standards and regulations: ISO 27001, ISO 27701, ISO 22301, ISO 13485, SOC2, NIST CSF, PCI DSS, GDPR, HIPAA, DORA
• Proven ability to interpret compliance regulations and framework requirements and translate them into practical policies and controls
• Experience in conducting compliance or security audits and assessments, including planning, execution, reporting, and follow-up
• Experience in drafting and maintaining compliance policies, procedures, and related documentation
• Experience in security consulting for multiple industries
• Solid understanding of information security, risk management, and data protection principles
• Upper-Intermediate English (spoken and written) and proficiency in Ukrainian
• Strong documentation, presentation, and communication skills, with the ability to explain complex topics in a clear and structured way

Nice to Have

• Knowledge of OWASP frameworks
• Hands-on experience with OWASP SAMM implementation in real projects
• Professional certifications such as CISA, CISM, CISSP, or similar

We Offer

• Diversity of Domains & Businesses
• Variety of technology
• Health & Legal support
• Active professional community
• Continuous education and growing
• Flexible schedule
• Remote work
• Outstanding offices (if you choose it)
• Sports and community activities

About the Company

Meet your team!

Why Us

At Sigma Software, we value diversity, continuous learning, and a supportive professional community. We offer flexible schedules, remote work options, and opportunities for personal and professional growth. Our commitment to health and legal support ensures a safe and secure working environment. Join us to be part of a dynamic team that values innovation and excellence.