Compliance Specialist - European Compliance Programs

Dalux is looking for a Compliance Specialist to help strengthen and expand our compliance efforts across European markets. As part of our Governance, Risk & Compliance (GRC) Team, which is part of our Legal department, you will play an active role in identifying, assessing and implementing European and country-specific security and compliance requirements. You will help ensure that Dalux remains aligned with relevant regulatory frameworks, certification schemes and industry standards while supporting our continued international growth. You will work closely with Information Security, Legal, IT, Product Development and commercial teams to translate compliance requirements into practical, risk-based measures that support both our security posture and business objectives. A significant part of the role will involve ensuring that policies, procedures and security controls are not only defined but also implemented and maintained across the organisation. You will also participate in meetings with external stakeholders such as customers or authorities. Key Responsibilities

• European Compliance Programs: Drive and coordinate compliance initiatives related to national and European frameworks such as BSI C5, ACN, Cyber Essentials and other relevant country-specific certification and assurance schemes.
• Regulatory Monitoring: Identify and assess emerging European and national security regulations, standards and compliance requirements relevant to Dalux.
• Gap Assessments: Conduct compliance gap assessments and coordinate remediation activities with relevant stakeholders, translating identified gaps into concrete actions.
• Certification & Audits: Support the preparation, execution and follow-up of external audits, certifications and compliance assessments.
• Customer Security Assurance: Prepare and respond to customer Security Assurance Questionnaires (SAQs), security due diligence requests and compliance inquiries, ensuring accurate, consistent and timely responses.
• Compliance Governance: Maintain compliance documentation, control mappings and evidence to demonstrate alignment with applicable requirements.
• Risk-Based Compliance: Ensure that compliance activities are aligned with Dalux's existing ISMS and risk management framework, avoiding unnecessary complexity and duplication.
• Commercial Support: Collaborate with Sales and Customer Trust teams to address local market compliance expectations and help position Dalux as a trusted European SaaS provider. You will help strengthen Dalux's position in the European market by demonstrating our understanding of and commitment to European security and compliance requirements, including participating in meetings with customers.
• Stakeholder Coordination: Work with internal control owners and colleagues across the organisation to ensure that compliance requirements are understood, implemented and continuously maintained.

About You You have a background in information security, IT governance, risk management or regulatory compliance and a strong interest in European cybersecurity regulations and certification frameworks. You have a good technical understanding of IT environments, cloud-based services and software development, enabling you to understand technical discussions, assess security measures and communicate effectively with technical specialists. You understand how to interpret compliance requirements and translate them into practical measures within a technology-driven organisation. You have preferably participated in implementing policies, procedures, processes or controls in a business environment. You take a pragmatic and risk-based approach to compliance, recognising that effective governance should protect the business while supporting innovation and growth. You are structured, analytical and proactive, with the ability to manage multiple compliance initiatives and coordinate activities across different teams. You have strong written communication skills, as the role involves an amount of documentation and policy development. You are also comfortable communicating with stakeholders across different departments and international markets. Experience with standards and frameworks such as ISO 27001, ISO 27701, BSI C5, Cyber Essentials, NIS2 or similar European compliance programs is an advantage, but not a requirement. Experience with cloud environments, SaaS or software development organisations is particularly relevant. About Dalux Dalux is an international technology company developing innovative software solutions for the global construction industry. Our cloud-based solutions help construction professionals digitalise workflows, improve collaboration and increase efficiency throughout the building lifecycle. With a strong international presence and continued growth, Dalux is committed to delivering secure, reliable and trusted solutions to customers worldwide. Security, privacy and compliance are integral parts of our business and play an increasingly important role in supporting our expansion into new markets. Dalux is already ISO 27001 certified and undergoes annual Cyber Essentials assessments. We continuously work to strengthen our Information Security Management System (ISMS) and embed security controls across the organisation, particularly within our R&D and cloud environments. As we expand into new European markets, we see our European foundation and commitment to European security requirements as an important part of building trust with our customers. Application deadline: As soon as possible