Job Description
We are looking
for a Compliance Manager to lead and oversee our regulatory compliance
efforts, ensuring adherence to SOC 2, GDPR, ISO 27001, and other relevant
standards. The ideal candidate will be responsible for managing audits,
implementing compliance frameworks, and ensuring continuous adherence to data
protection and security regulations.
Key Responsibilities:
- Regulatory Compliance: Ensure the organization complies with SOC 2, GDPR, ISO 27001, and other regulatory requirements related to data security and privacy.
- Audit & Certification Management: Lead internal and external audits, coordinate with third-party auditors, and ensure compliance with security frameworks.
- Policy Development: Create, update, and enforce compliance policies, procedures, and best practices across the organization.
- Risk Assessment & Mitigation: Conduct risk assessments and implement controls to address vulnerabilities in compliance processes.
- Vendor & Partner Compliance: Evaluate third-party vendors for compliance risks and ensure contractual agreements meet regulatory standards.
- Training & Awareness: Conduct compliance training for employees, ensuring they understand regulatory requirements and security protocols.
- Incident Response: Support security and legal teams in handling data breaches, regulatory investigations, and compliance-related incidents.
- Continuous Monitoring: Track changes in compliance laws and security regulations, ensuring the company stays ahead of evolving requirements.
- Reporting: Provide regular compliance reports to senior management, detailing compliance status, risks, and mitigation efforts.
Requirements- Education: Bachelor's or Master’s degree in Law, Information Security, Business, or a related field.
- Experience: 5+ years in compliance, information security, or risk management, preferably in a SaaS or technology company.Certifications (Preferred): CISA, CISM, CRISC, ISO 27001 Lead Auditor, CIPM, or similar compliance/security certifications.
- Technical Knowledge: Familiarity with SOC 2, GDPR, ISO 27001, NIST, HIPAA compliance frameworks.
- Auditing Experience: Experience leading internal and external audits and working with third-party auditors.
- Strong Communication: Ability to collaborate with legal, IT, security, and business teams, translating compliance requirements into business actions.
- Attention to Detail: Strong analytical skills for risk assessment, policy enforcement, and regulatory reporting.
Benefits- Be a key leader in shaping our compliance strategy and security posture.
- Work with a fast-growing, security-driven global company with international clients.
- Opportunity for professional growth, certifications, and training in compliance frameworks.
- This is a fully remote position; however, occasional travel or office visits may be required based on business needs.
D.engage is an equal opportunity employer committed to diversity and creating an inclusive workplace.
