Compliance

• Own the Q&A library mapped to ISO 27001, SOC 2, ISO 42001, NIS2, and GDPR
• Govern ownership, approval status, evidence links, confidentiality classifications, and review dates for the Q&A library
• Maintain consistency across the Q&A library, trust center, Trust Center portal, policies, and engineering practices
• Manage customer security reviews from questionnaire intake through delivery
• Validate unverified answers with Security, Engineering, or Product
• Keep public trust-center and NDA-gated Trust portal document sets current
• Run the annual audit and certification programme, including SOC 2 Type II renewal, ISO 27001 and ISO 42001 surveillance, NIS2 assessment, penetration testing and retesting, and customer right-to-audit requests
• Gather evidence and liaise with the DPO and auditors
• Manage audit findings, remediation, and management assertions
• Operate the ISMS and AIMS with the Security Lead, including the risk register, statement of applicability, policy lifecycle, access reviews, internal audit, management review, and security steering cadence
• Own vendor policy and third-party risk processes, including intake, tiering, due diligence, DPA terms, AI-provider data-retention and no-training commitments, approval, re-review, and offboarding
• Manage subprocessor reviews, customer notifications, DPA updates, and portal updates
• Report to the Head of Engineering and work daily with the Security Lead

Compliance Manager

• Build and lead team.blue’s central Compliance function within group legal
• Lead and develop Privacy Counsels, AI Counsels, and the general compliance risk-monitoring and assurance function
• Act as a first-line advisory function embedded in group legal and work alongside legal and business teams
• Drive practical implementation of regulatory requirements into business lines
• Apply a risk-based approach to prioritise compliance efforts across brands and jurisdictions
• Own the group compliance agenda for GDPR, the AI Act, the Data Act, DORA and NIS2
• Centrally coordinate the group’s Digital Services Act standard
• Set group standards, policies and playbooks and deploy them through self-serve templates and Legal Hub automation
• Anticipate incoming EU digital regulation and assess operational impact across the portfolio
• Own or coordinate sanctions, AML, conflicts of interest, third-party risk management, fraud, consumer protection and business integrity topics
• Safeguard independent judgement and provide independent oversight on escalation
• Own continuous compliance risk monitoring, assurance, regulatory watch and register-driven action
• Steer the function using KPIs such as maturity and awareness, self-serve adoption, response time and residual risk
• Partner with divisional General Counsels to embed compliance across business lines
• Foster compliance culture and enable local counsels and non-legal teams to self-serve
• Advise senior leadership and divisional GCs on compliance risk and regulatory exposure
• Work with the Sustainability Director on the digital-trust agenda and responsible-technology commitments

Head of Compliance

• Prepare, submit and maintain Clinical Trial Applications (CTAs) acting as Local Regulatory Contact (LRC) and/or Regulatory Lead (RL)
• Support CTIS submissions, amendments, notifications and regulatory interactions with regulatory authorities
• Manage post-authorisation activities, including variations, renewals, transfers and other lifecycle maintenance procedures
• Review and update product information documents (SmPC, PIL, labelling texts) and artwork materials in compliance with local and EU requirements
• Coordinate with internal project teams, clients and regulatory authorities to ensure timely and compliant submissions
• Track regulatory commitments, maintain documentation and support regulatory strategy implementation
• Work under the general direction of a Project Lead and/or Technical SME, ensuring client work is delivered on time and meets quality expectations
• Potentially act in a client-facing role with guidance and support from line management

Compliance jobs in Czechia

Compliance Manager

Head of Compliance

Senior Regulatory Affairs Associate – CTA, MAA