YOUR KEY RESPONSIBILITIES:

• Running the SOC 2 certification cycle - preparation, audit, renewal.
• Leading the ISO 27001 implementation - from framework to certification, as project owner.
• Maintaining GDPR compliance and related data protection policies.
• Identifying and managing regulatory and operational risk.
• Partnering with the security team where compliance meets technical security.
• Working with product, engineering, and operations teams so that compliance is part of the process from the start, not a correction after the fact.
• Creating and maintaining policies and processes - concise, readable, and actually used in day-to-day work.
• Leading external audits as the auditee.
• Building compliance awareness across the organisation in an accessible and engaging way.
• This role reports directly to COO/CFO. Compliance is a standalone function at KYP.ai - you will be its owner and the main point of contact within the organisation.

YOUR EXPERIENCE PROFILE:

• Minimum 5 years of professional experience, including at least 3 years in risk & compliance.
• Track record of leading certification projects - in particular SOC 2 and/or ISO 27001 from the auditee side.
• Practical knowledge of GDPR and information security frameworks (ISO 27001, SOC 2, NIST as context).
• Experience in leading and coordinating external audits.
• Natural process-oriented approach - you can take a project from plan to certification.
• AI-first way of working. Tools such as Claude or NotebookLM are part of your daily toolkit, not a curiosity. You use them to work faster and better, while having enough compliance expertise to independently verify their output.
• Pragmatic approach to documentation - you value brevity and usefulness over volume.
• Strong written and spoken English - all documentation, audits, and internal communication are in English.
• University degree - the field of study is secondary to your experience and way of thinking.

NICE TO HAVE:

• Experience in a SaaS or broader technology company.
• Consulting background (Big 4 or a smaller certification boutique) - we value a structured, systematic approach.
• Certifications in project management (PRINCE2, PMP) or compliance / information security (CISA, CISM, CIPP/E, ISO 27001 Lead Auditor).
• Knowledge of additional regulations and frameworks: PCI-DSS, SOX, DORA, NIS2, HIPAA.
• Experience working with product and engineering teams.

WHAT DOES IT MEAN TO YOU?

• Full ownership of the compliance function in a maturing SaaS organisation - reporting directly to COO/CFO, with real influence on strategy.
• A tangible project to start with - leading the ISO 27001 implementation as your first major deliverable.
• Working in an environment where AI is part of the daily toolkit, not a declaration - with access to the best tools and the freedom to experiment with them.
• Flat structure, short decision-making path, and direct collaboration with leadership.
• Solid foundations to build on - you are not starting from zero.

WHERE YOU WILL WORK?

• Fully remote, within the CET time zone.
• Optional office work - we have offices in Tychy and Berlin.
• Collaboration with an international, distributed team.

WHAT'S IN IT FOR YOU?

• Premium medical package for you and your loved ones.
• Multisport card to keep you fit.
• Access to AI tools in your daily work - Claude and similar, covered by the company.
• Autonomy and decision-making power in the compliance area.
• Salary that reflects what you bring, not a bracket we decided before we met you.