Quality and Compliance Specialist

About the role

We are seeking a Privacy & Compliance Specialist to lead privacy, compliance and information security governance across the organization. You will be responsible for preparing and maintaining the systems, policies and evidence required for multiple ISO certifications and applicable data protection regulations.

Key responsibilities

• Support the implementation and ongoing management of ISO 27001 / ISMS.
• Lead privacy management activities aligned with ISO 27701 and GDPR principles.
• Maintain information security and privacy risk registers, data inventories, data‑flow maps and Records of Processing Activities (RoPA).
• Conduct and document DPIAs and privacy impact assessments where required.
• Coordinate compliance evidence, prepare for external audits and certification assessments.
• Work with technical teams to ensure controls meet compliance requirements and provide security/privacy awareness training.

Required profile

• Degree or diploma in Law, Compliance, Privacy, Cybersecurity, IT, Risk Management or a related field.
• 2–5 years of practical privacy, compliance, GRC or information security experience.
• Demonstrated experience developing policies, maintaining compliance documentation and managing audit requirements.
• Strong documentation, organizational and communication skills with the ability to work closely with technical and non‑technical teams.

Required skills

• ISO 27001 / ISMS implementation and management.
• ISO 27701 privacy information management.
• ISO 27017 / ISO 27018 cloud security standards.
• GDPR and broader data protection principles.
• Risk assessment and risk management.
• Audit preparation and evidence management.
• Vendor / supplier risk management.
• Data mapping, DPIA, data retention and privacy‑by‑design practices.