Compliance & Information Security Specialist

We are seeking a highly motivated, detail-oriented Compliance & Information Security Specialist to join our IT Security team. In this role, you will work directly with the CISO to define, enforce, and monitor compliance and security standards across the organization. You will play a pivotal role in ensuring that AvaTrade aligns with international regulations—particularly DORA (Digital Operational Resilience Act)—and internal security policies.

Responsibilities:

• Co-author and maintain all cybersecurity and IT compliance policies with the CISO
• Lead the drafting of procedures aligned with DORA and other regulatory frameworks
• Ensure documentation is up-to-date, actionable, and audit-ready
• Track compliance with internal policies and external regulations across departments
• Lead or support internal audits, risk assessments, and gap analyses
• Manage compliance checklists, evidence gathering, and corrective actions
• Work cross-functionally with IT, DevOps, HR, Legal, and Risk to embed compliance into workflows
• Act as a key point of contact during security reviews and external audits
• Provide guidance and training to teams on security best practices and compliance obligations
• Provide regular compliance reports to the CISO
• Track remediation timelines and policy exceptions
• Contribute to the preparation of board-level security briefings

Requirements:

• 2–4 years of IT security and compliance experience – must
• Proven experience working in international companies – must
• Hands-on involvement in writing and enforcing security policies and procedures – must
• Strong familiarity with security frameworks (e.g., NIST, ISO 27001, CIS) – must
• Understanding of or exposure to DORA regulation – must
• Fluent English (written and verbal) – must (90% of daily work is in English)
• Highly organized, methodical, and able to drive processes end-to-end – must
• CISSP, CISA, CISM, or equivalent certification – strong advantage
• Experience supporting regulatory audits or due diligence reviews – advantage
• Familiarity with cloud environments (AWS, Azure) and SaaS application security – advantage
• Strong interpersonal and communication skills
• Team player with a collaborative mindset
• Strong analytical and problem-solving abilities
• Self-motivated with the ability to work independently and handle multiple tasks simultaneously
• High attention to detail and commitment to delivering high-quality work