Risk and Compliance Expert

Technology & Business Solutions, LLC

. Develop and maintain the integrated management system covering eight ISO standards: ISO 9001, ISO 14001, ISO 45001, ISO/IEC 20000-1, ISO/IEC 27001, ISO/IEC 27701, ISO 22301, and ISO 37001 .

Posted 9/16/2026full-timeSofia • BulgariaJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining integrated management systems across multiple ISO standards, with a strong focus on compliance, risk management, and internal auditing. Proficient in preparing documentation, conducting audits, and delivering training to ensure organizational adherence to regulatory requirements.

Highest-signal resume keywords

ISO 9001 Management SystemISO 27001 Management SystemGDPR ComplianceRisk ManagementInternal Auditing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

ISO 14001ISO 45001ISO/IEC 20000-1ISO/IEC 27701ISO 22301ISO 37001TISAXCSRDEcoVadisRisk Assessment

Soft Skills

Excellent Communication SkillsAnalytical SkillsProblem-Solving SkillsIndependent Process ManagementTraining and Onboarding

Tools & Technologies

MS OfficeITIL

Industry Keywords

ComplianceRisk ManagementQuality ManagementInternal AuditCybersecurity ActNIS2Sector-Specific LegislationESG Reporting

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Develop and maintain the integrated management system covering eight ISO standards: ISO 9001, ISO 14001, ISO 45001, ISO/IEC 20000-1, ISO/IEC 27001, ISO/IEC 27701, ISO 22301, and ISO 37001
Implement and maintain additional frameworks including TISAX, CSRD, and EcoVadis
Manage business processes end to end, from identification and design through implementation and monitoring
Prepare and maintain practical business process documentation
Develop, review, and update policies, procedures, and internal regulatory documents
Monitor regulatory changes including the Cybersecurity Act/NIS2, GDPR, and sector-specific legislation, and assess organizational impact
Conduct compliance checks and gap analyses
Support communication with regulatory and supervisory bodies
Identify, assess, and document risks in the risk register
Develop and implement risk treatment measures
Report periodically on the organization's risk profile
Serve as point of contact for certification and supervisory bodies
Plan and conduct internal, certification, and surveillance audits
Document nonconformities and track corrective actions
Support teams during external second- or third-party audits
Develop and deliver compliance, risk, and internal-control training
Conduct onboarding and periodic staff training
Communicate new or changed processes through internal channels
Partner with process owners across the organization

Requirements

What you’ll need

University degree in Business Administration, Engineering, IT, or a related field
Minimum 2–4 years of relevant experience in compliance, risk management, quality, or internal audit
Practical experience implementing and/or maintaining at least one management system from the company's portfolio (ISO 9001, 27001, 22301, 20000-1, etc.)
Working knowledge of GDPR and personal data protection
Fluent English — written and spoken
Excellent communication skills — the ability to translate complex requirements in a way that colleagues across all functions can understand
Ability to manage processes independently, end to end, without needing step by step instructions
Skills in researching and interpreting regulatory requirements
Strong analytical and problem-solving skills
Confident working knowledge of MS Office (Word, Excel, PowerPoint) for preparing documentation, analyses, and presentations to management
Knowledge of ITIL is considered an advantage
Experience with ESG reporting and/or rating frameworks (e.g., CSRD, EcoVadis) is considered an advantage

Benefits

Comp & perks

Funded training and certifications (e.g., Lead Auditor courses) in the standards and topics relevant to the role
A genuine path for professional growth within the team — progression toward a Senior/Lead role as experience is gained
Flexibility and a hybrid work model
Team-building events and social activities outside of work