Intern assisting in compliance - related tasks and internal policy review at Veirano Advogados. Role requires ongoing learning and hybrid work in São Paulo.
About the role
- Governance, Risk and Compliance Manager leading LEAP’s global GRC function. Connecting security and compliance practices to business growth in a technology environment.
Responsibilities
- Own and mature LEAP’s global governance, risk, and compliance program, aligned to SOC 2, ISO 27001, NIST CSF, and relevant regional frameworks.
- Lead audits and independent assessments, acting as the primary contact for external auditors and assessors.
- Maintain a single source of truth for security policies, controls, and evidence across LEAP and its product portfolio.
- Ensure compliance scales as the business grows, acquires products, and expands into new markets.
- Establish and run an enterprise risk management framework, including risk assessments and executive risk acceptance.
- Conduct access reviews, control effectiveness reviews, and third-party risk assessments, providing pragmatic guidance on risk and trade-offs.
- Own enterprise security questionnaires, RFPs, and due diligence responses, reducing friction in the sales process.
- Maintain LEAP’s client-facing Trust Centre and standardise responses to recurring customer questions.
- Act as the escalation point for complex assurance topics, including AI usage, data handling, and product architecture.
- Oversee security awareness and training programs to lift security maturity across the organisation.
- Work closely with Information Security, Engineering, IT, Product, and Sales to embed compliance without slowing delivery.
- Use automation and tooling to improve efficiency, reduce reactive work, and help build a scalable, sustainable security function.
Requirements
- Proven experience in GRC, Technology Risk, or Information Security Compliance roles within SaaS, cloud, or technology environments.
- Hands-on experience owning SOC 2 and/or ISO 27001 programs, and supporting enterprise customer security due diligence.
- Strong understanding of cloud infrastructure, SaaS architectures, and modern software delivery practices.
- Experience leading audits, managing evidence, and engaging directly with customers, auditors, and internal stakeholders.
- Ability to translate technical security controls into clear, business-focused explanations that support sales and executive decision-making.
- Experience operating in complex or multi-entity environments, and working pragmatically with changing requirements and incomplete information.
- Prior people leadership experience, or readiness to build and lead a small GRC team.
Benefits
- Flexible and hybrid working.
- Enjoy an additional paid wellbeing day every year.
- Free gym membership.
- Corporate dental plan.
- Weekly massages in the office.
- Celebrations.
- Socials.
- Sports teams.
- Access to sailing and yacht events.
- Opportunities for career growth.
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Pre - Sales & Compliance Specialist overseeing proposals and compliance processes at Zalaris. Responsible for contract management, documentation, and collaboration with sales teams.
Quality Manager in Regulatory Affairs ensuring compliance with ISO 13485 standards and managing the company's Quality Management System. Provide guidance on quality and compliance issues in AI - powered breast cancer detection.
Regulatory Affairs Specialist managing FDA submissions for innovative medical diagnostics. Drive regulatory strategies and collaborate with teams to ensure compliance and approvals.
Fraud & Compliance Analyst at UK fintech overseeing fraud prevention and regulatory compliance efforts. Managing dispute cases, KYC, and AML compliance in a hybrid workplace.
Working Student at Upvest enabling investing accessibility and product experiences across Europe. Collaborating closely with product and engineering teams in a dynamic fintech environment.
Compliance Programs Coordinator supporting operational functions for Global Compliance team at Arcadis. Coordinating compliance program activities, documentation, and stakeholder communication within a hybrid work environment.
Engineer I at Emerson managing product environmental compliance issues through detailed analyses and collaboration. Documenting regulatory approvals and certifications for sustainable engineering solutions.
Manager responsible for regulatory compliance at BOQ Group. Collaborating with stakeholders to ensure compliance and drive improvements in processes and controls.
Associate Regulatory Reporting ICAAP at international bank in Zurich. Focus on regulatory and financial risk analysis and reporting requirements in compliance with Basel III.