Regulatory Compliance Analyst

About SpotOn
 
We're not just building restaurant tech—we're giving independent restaurants the tools to compete and win. From our award-winning point-of-sale to AI-powered profit tools, everything we do helps operators boost profit, work smarter, and keep their best people. And every solution is backed by real humans who actually give a sh*t about helping restaurants succeed.

• Named the #1 Restaurant POS by G2 (Fall 2025), based on ratings from real users
• Rated the top-rated point-of-sale (POS) for restaurants, bars, retail, and small businesses by Capterra users
• Awarded Great Places to Work and Built In's Best Workplaces for multiple years running

We move fast, care hard, and fight for independent restaurant operators to do what they love, and love doing it. If you're looking to make an impact with heart and hustle, SpotOn is the place for you.

The Regulatory Compliance Analyst's primary responsibility is executing on approved and detailed tasks that lead to the overall compliant standing of the organization. The ideal candidate will need to utilize high levels of attention to detail to review inquiries, create and maintain reports and monitor various compliance programs as assist with various merchant compliance based requests.

On a daily basis, you will:

• Represent Poland in Data Privacy Matters; serving as the PL Data Protection Officer under the Global Chief Compliance Officer.
• Support, intake and investigation of first line Whistleblower reports for the Poland Office.
• Maintain training records for compliance training.
• Maintain regulatory complaint logs to document remediation efforts. 
• Assist with monitoring and testing initiatives to support merchant and card brand compliance.
• Assist with response and inquiries from merchants related to compliance matters including PCI DSS and card brand violations.
• Work regulatory alerts as assigned.

What skill are we searching for? 

• Experience in Poland and EU Data Protection Laws.
• Willing to come into our Kraków office 2-3 times per week.
• Knowledge of EU Whistleblower Directive and Poland Protection Of Whistleblowers Act.
• Excellent research and investigation skills.
• Effective communication skills both verbal and in writing. 
• Ability to work autonomously and with discretion.
• Experience with policy and procedure drafting.
• Familiarity with Card Brand rules and requirements to support merchant compliance initiative.
• Detailed-oriented and must have the ability to prioritize all tasks appropriately. 
• Experience working with global teams and flexible work schedules.

Perfect candidate also has: 

• 3-5 years of relevant work experience in financial services/banking industry.
• 2-3 years direct experience with GDPR (EU General Data Protection Regulation) and/or the Poland Data Protection Act of 2018. Data Protection Officer experience strongly preferred. 
• 1-2 years of credit card processing experience. 
• 2-3 Compliance and/or risk experience preferred.
• 1-2 years experience on internal investigations, research or testing preferred.

Here's a bit about what we have to offer:

• Competitive pay: PLN gross on CoE.
• Fully paid private healthcare in LuxMed.
• Access to the Worksmile platform with a monthly top-up.
• Subsidized access to breakfast and lunch through the vending machine in Kraków office, and lunches in Gdańsk office once a week.
• New, modern, bright and comfortable office space in the city centre. 
• A lot of free parking spots around the office.
• Access to the company's library.
• Great working atmosphere.
• Chill out room with a PlayStation, table tennis, and mini gym.
• Free snacks and beverages in a kitchen.
• Company parties and social activities.
• Employee referral program.
• Relocation Package within Poland.

The controller of your personal data included in your job offer and others collected during the recruitment process is SpotOn Poland spółka z ograniczoną odpowiedzialnością with its registered office in Kraków, Aleja 29 listopada 20, Kraków, e-mail address:
poland- We will process your personal data for the purpose of current or, if you voluntarily agree, also future recruitment processes. More information about how we proccess your data, including the basis for processing and your rights in relation to the processing, can be found on our website:

Administratorem podanych danych osobowych, w tym danych zawartych w dokumentach aplikacyjnych i zebranych w toku procesu rekrutacji, jest SpotOn Poland Sp. z o.o. z siedzibą w Krakowie (ul. Aleja 29 listopada 20, Kraków; adres e-mail do kontaktu:
poland- Dane osobowe będą przetwarzane w celu realizacji obecnych lub – jeżeli wyrazisz na to dobrowolną zgodę – także przyszłych procesów rekrutacji. Więcej informacji o tym, jak przetwarzamy Twoje dane, w tym także informacje o podstawach prawnych przetwarzania oraz o prawach przysługujących Ci w związku z przetwarzaniem danych, znajdziesz na stronie:

SpotOn is an equal employment opportunity employer. Qualified candidates are considered for employment without regard to race, religion, gender, gender identity, sexual orientation, national origin, age, military or veteran status, disability, or any other characteristic protected by applicable law.

SpotOn is an e-verify company.

---