Capital.com
Capital.com
Capital.com is a fintech company that develops an accessible digital trading platform and app for users across Europe and other markets. Its offering combines trading tools with a smart news feed, financial content, and educational resources designed to help users engage with financial markets more confidently. The platform is available in 23 languages, and Capital.com operates under oversight from financial regulators including the UK Financial Conduct Authority and the Australian Securities and Investments Commission.

Senior IT Assurance and Compliance Specialist - Capital.com, Hybrid Poland

Lead IT audit readiness, regulatory gap assessments, and remediation for Capital.com, a growing digital-assets fintech. Turn regulatory obligations into practical controls and clear guidance for technical teams.

Description

  • Lead end-to-end preparation for IT audits and regulatory reviews, from gathering evidence and coordinating with technology teams to delivering complete audit packages on schedule.
  • Assess new regulatory requirements, record gaps, and develop remediation plans with defined owners and deadlines.
  • Serve as the company-wide subject-matter expert for IT compliance matters.
  • Convert regulatory obligations into practical implementation guidance for technical teams.
  • Keep IT Assurance and Compliance documentation audit-ready, including evidence repositories and compliance registers.
  • Review and help develop IT and Security policies, standards, and procedures.
  • Advise on IT compliance to support regulatory alignment and practical implementation across teams.
  • Own audit readiness and daily IT Assurance and Compliance activities in a fast-paced fintech environment.

Requirements

  • At least four years of experience in IT compliance, IT audit, or information security governance.
  • Background in fintech, banking, or another regulated sector.
  • Practical experience performing gap assessments, creating remediation plans, and driving findings through closure.
  • Working knowledge of at least two frameworks, such as DORA, PCI DSS, or SOC 2.
  • Understanding how compliance frameworks operate together across multiple jurisdictions is advantageous.
  • Ability to independently manage complex and ambiguous IT compliance assignments.
  • Strong communication skills for explaining regulatory obligations to technical teams and presenting clear compliance positions to regulators and senior stakeholders.
  • High attention to detail when managing documentation, evidence packages, policy versions, and control registers.

Benefits

  • Competitive compensation.
  • Annual performance-based bonus.
  • Annual leave allowance.
  • Employee referral program.
  • Medical insurance.
  • Pension plans.
  • Benefits and perks tailored to the work location.
  • Up to 30 additional days each year to work remotely from anywhere in the world, subject to restrictions.
  • Two additional paid volunteer days annually.

Related Jobs