e will be truly cross-functional in nature, working across Security & Privacy and various business teams to ensure accurate and timely reporting deliverables. The preferred candidate will be a vital participant in developing a structured, transparent and industry-leading U.S. regulatory compliance framework and guidelines that closely adheres to the US compliance requirements and objectives, with built-in mechanisms to monitor, report, and audit compliance status.
Responsibilities:
- Assist with the coordination, execution, and communication of U.S. Compliance initiatives, including privacy impacts
- Serve as the liaison, partnering with the business, security, and privacy teams and assisting them to implement regulatory compliance requirements and establish mechanisms to track compliance and potential violations
- Manage the compliance lifecycle: assess current US Compliance posture, identify compliance gaps and develop corrective action plans to remediate gaps, drive remediation efforts with control owners, and report progress to stakeholders
- Collaborate with the Compliance Assurance Team to develop clear guidelines and educational materials to inform the business of new or changing compliance requirements
- Oversee data management, change documentation and implementation tracking in response to actual or perceived U.S. compliance incident, compliance, or governance requirements
- Contribute to defining the long-term strategy around US compliance and drive the implementation of strategic roadmap initiatives
- Develop and track KPIs and KRIs to help measure team performance and key risks that can impact organizational compliance and regulatory requirements
- Consistently deliver high-quality services and deliverables
Qualifications
Minimum Qualifications
- 3+ years applicable experience
- Excellent analytical, written reporting, problem-solving, and communication skills with the ability to influence and manage projects end-to-end
- Experience working within compliance programs; experience with U.S. compliance frameworks along with working knowledge of international compliance standards and requirements
- CFIUS, FTC order, or other applicable U.S. compliance regulatory reporting experience as well as experience conducting risk assessments and tracking treatment plans
- Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams
- Experience reporting risk (KRIs/KPIs) within a global enterprise, developing a culture of risk informed decision making
- Demonstrates excellent organizational direction, time management, problem-solving, prioritization, goal setting, leadership, motivation, negotiation, and interpersonal relations along with possessing a high degree of integrity, be trustworthy, and have the ability to lead and inspire change
Preferred Qualifications
- Bachelor's Degree & 5+ years applicable experience
- Start-up high-tech experience
- One of the following certifications, or equivalent certifications: CISA, CDPSE, CISM, CRISC, GCIH, GCIA, CRCM or CCEP (or industry-specific) compliance certification
- Experience with risk and controls frameworks including (ISO 27001, NIST CSF, NIST RMF, FAIR, COBIT, NIST RMF, ISO 31000 etc.)
- Experience executing data governance, data protection, change management processes