About The Role
Here at Curaleaf International we're looking for an experienced and proactive IT Compliance Manager to take ownership of our IT, information security and regulatory compliance activities across the organisation. This is an exciting opportunity for someone who enjoys bringing structure, clarity and accountability to complex compliance environments. You will play a key role in ensuring that our organisation meets and maintains its regulatory and certification obligations, including ISO 27001, SOC 2, GDPR, Cyber Essentials Plus, NIS2 and the EU AI Act. Acting as the central point of coordination between IT, Engineering, Product, Legal, Compliance and external auditors, you will ensure that our policies, processes, controls and supporting evidence are maintained to a high standard. We are looking for someone who can combine strong technical understanding with excellent organisational and stakeholder management skills, taking ownership of compliance activities and driving improvements through to completion.

About Us
Curaleaf International is shaping the future of cannabis through its commitment to research and product excellence. Powered by a strong presence at all stages of the supply chain, its unique distribution network throughout Europe, Canada and Australasia brings together pioneering research with cutting-edge cultivation, extraction, and production. Amidst a rapid growth trajectory, the emphasis on quality and expertise aims to ensure the delivery of safe and legal cannabis. Curaleaf International's network includes a clinic, pharmacy,



and laboratory in the UK; cultivation and EU-GMP processing facilities in Portugal; an EU-GMP processing, quality assurance and research site in Spain; Four 20 Pharma wholesaler and distributor in Germany; a Polish wholesaler and clinic; and the EU-GMP producer Northern Green Canada. Curaleaf International is part of Curaleaf Holdings, Inc., a leading international producer and distributor of consumer cannabis products. Our Values: Lead & Inspire, Commit to Win, Driven to Deliver Excellence, Customer Obsession, One Curaleaf

Key Responsibilities
• Maintain IT compliance documentation, including policies, procedures, risk assessments and control records.
• Manage the ISO 27001 ISMS, SOC 2 requirements and UK Cyber Essentials Plus certification.
• Support GDPR compliance alongside the Data Protection function, monitor NIS2 obligations and maintain the EU AI Act inventory and risk classifications.
• Maintain the security and compliance risk register, tracking remediation actions and reporting progress to management.
• Coordinate internal and external audits, working with auditors and certification bodies.
• Manage third-party and supplier security and compliance assessments.
• Support incident response, including compliance documentation, regulatory notifications and lessons learned.




• Work collaboratively with Engineering, Product, Legal, Compliance, Sales and Public Sector teams to embed compliance across the organisation. About You You are an organised and proactive compliance professional with experience managing information security frameworks and regulatory requirements. You are confident working across technical and non-technical teams, with the ability to translate complex requirements into practical controls and processes. You will ideally have:
• Experience implementing or maintaining ISO 27001, ideally with a Lead Implementer or Lead Auditor qualification.
• Experience with SOC 2 and working knowledge of Cyber Essentials Plus.
• A practical understanding of GDPR, NIS2 and the EU AI Act.
• Experience coordinating audits, managing compliance risks and driving remediation activities.
• Solid documentation, organisational and stakeholder management skills.
• The ability to work collaboratively across technical, legal and compliance teams. Relevant qualifications are desirable but not essential where equivalent practical experience can be demonstrated. What You'll Get From Us At Curaleaf International, we're not just participating in the cannabis industry
- we're leading it From day one, you'll receive a comprehensive training programme designed to help you succeed and develop in your role. Plus:
• Competitive salary
• Excellent holiday allowance
• Private medical insurance
• Life insurance Join Curaleaf and help shape the future of medical cannabis.

📌 IT Compliance Manager (Banana Shire)
🏢 Curaleaf International
📍 Banana Shire