Compliance Consultant

About the Position

Compliance Consultant

Middle Remote

Europe, Ukraine

---

Overview

Sigma Software is looking for a Compliance Consultant to strengthen our governance, risk, and compliance practices. In this role, you will work with a wide range of international standards and regulations (such as ISO 27001, SOC 2, GDPR, and others), translating them into clear, practical controls, policies, and processes. You will conduct audits and assessments, advise stakeholders on compliance risks, support certification and customer due diligence activities, and contribute to awareness and training initiatives.

This position is a great fit for a specialist who enjoys working at the intersection of information security, regulations, and business needs, and who is ready to drive tangible improvements in a dynamic IT environment.

---

Responsibilities

• Lead and oversee compliance projects in accordance with relevant standards and frameworks (e.g., ISO 27001, ISO 27701, ISO 22301, ISO 13485, SOC2, NIST CSF, PCI DSS, GDPR, HIPAA, DORA, OWASP SAMM)
• Develop, implement, and maintain comprehensive compliance policies, procedures, and guidelines aligned with regulatory and framework requirements
• Conduct comprehensive internal audits and assessments to ensure regulatory and framework compliance, documenting findings and non-conformities
• Provide clear, actionable recommendations for corrective and preventive actions and support stakeholders in implementing them
• Collaborate with stakeholders to perform risk assessments and define appropriate controls
• Develop, update, and implement advanced compliance training programs for employees
• Support and enhance the compliance awareness program, promoting a strong compliance and security culture across the organization
• Investigate, resolve, and provide guidance on complex compliance-related requests, incidents, and complaints

---

Requirements

• 3+ years of experience in compliance management and implementation, preferably in IT, consulting, or related fields
• Proficiency in some of the following standards and regulations: ISO 27001, ISO 27701, ISO 22301, ISO 13485, SOC2, NIST CSF, PCI DSS, GDPR, HIPAA, DORA
• Proven ability to interpret compliance regulations and framework requirements and translate them into practical policies and controls
• Experience in conducting compliance or security audits and assessments, including planning, execution, reporting, and follow-up
• Experience in drafting and maintaining compliance policies, procedures, and related documentation
• Experience in security consulting for multiple industries
• Solid understanding of information security, risk management, and data protection principles
• Upper-Intermediate English (spoken and written) and proficiency in Ukrainian
• Strong documentation, presentation, and communication skills, with the ability to explain complex topics in a clear and structured way

---

Nice to Have

• Knowledge of OWASP frameworks
• Hands-on experience with OWASP SAMM implementation in real projects
• Professional certifications such as CISA, CISM, CISSP, or similar

---

Personal Profile

• Strong analytical and problem-solving skills, able to structure and prioritize complex tasks
• Excellent communication and stakeholder management abilities
• Detail-oriented with a strong commitment to accuracy and quality in documentation and processes
• Ability to work independently, take ownership of initiatives, and drive them to completion
• Comfortable working in cross-functional, distributed teams and managing multiple tasks in parallel
• Proactive, responsible, and oriented toward continuous improvement of processes and controls

---

We Offer

• Diversity of Domains & Businesses
• Variety of technology
• Health & Legal support
• Active professional community
• Continuous education and growing
• Flexible schedule
• Remote work
• Outstanding offices (if you choose it)
• Sports and community activities

---

About the Company

At Sigma Software, we pride ourselves on fostering a dynamic and inclusive work environment. Our commitment to diversity, continuous education, and employee well-being ensures that our team thrives both professionally and personally. We offer flexible schedules, remote work options, and a variety of activities to support our employees' health and community engagement.