Develop, implement, and maintain corporate compliance policies, standards, and procedures.
Lead internal compliance governance initiatives, including regular committee meetings and reporting to senior leadership.
Monitor regulatory developments and assess their impact on the organization.
Support enterprise risk management (ERM) framework, ensuring risks are identified, assessed, mitigated, and monitored.
Work with business units to implement controls and risk mitigation strategies.
Conduct periodic risk and internal assessments and present findings to executive stakeholders.
Ensure appropriate documentation and reporting of risk and compliance issues, including compliance audits and risk assessments.
Foster a culture of risk awareness and compliance throughout the organization by encouraging proactive risk management practices at all levels.
Oversee compliance with applicable laws, regulations, and internal policies (e.g., GDPR, ISO 27001, and PCI-DSS).
Manage internal and external audits, regulatory examinations, and third-party assessments.
Collaborate with Legal, Security, IT, and other departments to ensure consistent compliance posture.
Track and monitor compliance issues and findings and ensure compliance to requirements across the company
Provide guidance, training, and development opportunities to build expertise within the team.
Develop and deliver compliance training programs to promote awareness and understanding across the organization.
Cultivate a culture of compliance through ongoing education and communication.
Lead the implementation and management of GRC tools/platforms.
Generate regular dashboards and reports on compliance and risk metrics for senior leadership and the board.
Maintain documentation and evidence to support audit readiness and reporting.
Requirements
Bachelor’s degree in information systems, business, cybersecurity or related field
5+ years of experience in cybersecurity and privacy compliance, risk management or internal audit
Experience with regulatory frameworks such as SOC 2, ISO 27001, PCI DSS, NIST 800-53 or other industry-specific regulations
Knowledge of privacy (GDPR) requirements is a plus.
Strong analytical and problem-solving abilities, attention to detail, excellent communication and interpersonal skills, ability to work independently and as part of a team.
Proven leadership in managing cross-functional compliance or risk programs.
Experience with risk management tools, compliance monitoring systems, and data analytics.
Ability to effectively engage with senior leadership and other key stakeholders.
Proven ability to manage multiple priorities and work in a fast-paced environment.
Proficiency in Google Suite and Microsoft Office Suite. Experience with GRC tools (e.g., Archer, ServiceNow GRC, LogicGate, RiskCloud, MetricStream).
Professional certifications such as CISSP, CRCM, CCEP, CISA, CRISC, or similar.
Benefits
Competitive compensation, plus all full-time employees participate in our ownership program - because everyone should have a stake in our success.
Flexible schedules and a remote-friendly culture, with hybrid or onsite work options available in some regions for specific roles
Generous time off, including local holidays and our annual company-wide “Dim the Lights” week in late December, when we encourage everyone to step back and recharge
Comprehensive wellness programs and mental health support
Annual learning and development stipends to support your growth
The technology and tools you need to do your best work — typically a Mac, with PC options available in some locations
Motivosity employee recognition program
A culture rooted in inclusivity, support, and meaningful connection
Intern assisting in packaging development for major food industry company. Contributing to compliance analysis and audits while collaborating with engineering teams.
Compliance Manager responsible for quality assurance and compliance at Nestlé's Marton Factory. Leading a team to uphold food safety and hygiene standards in a key manufacturing role.
EUDR Compliance Coordinator ensuring Kafea Terra’s compliance with EU Deforestation Regulation. Role involves collaboration across Operations, IT, Legal, Finance, Supply Chain, and Marketing teams.
Compliance Data Specialist role focused on data extraction and analysis for regulatory compliance at Kantox. Collaborating with IT and compliance teams to ensure data accuracy and support regulatory obligations.
Associate role at Kroll supporting research and due diligence in compliance. Focused on onboarding and managing risks associated with clients and third parties.
Senior Director leading AML Network Surveillance Monitoring and Regulatory Strategy for Capital One. Oversee integrated team ensuring compliance with regulatory standards and effective operations across on - shore and off - shore groups.
IT Compliance Specialist ensuring compliance with DORA and other regulations. Collaborating with IT and security teams for a secure digital environment.
Senior Compliance Risk Manager providing independent oversight of business products and compliance with NAIC regulations. Key role in ensuring adherence to legal requirements and influencing business solutions in financial services.
Senior Compliance Officer managing compliance operations for Hex Trust. Overseeing KYC, regulatory communications, and compliance activities for global expansion.
Senior Director leading the AML Network Surveillance Monitoring team at Capital One. Responsible for strategy development, regulatory alignment, and managing diverse teams across multiple locations.