Description

Own the global compliance framework, ensuring alignment with regulatory requirements and business objectives.

This role is on-site.

Responsibilities

• Lead risk assessments and audits to identify vulnerabilities and implement mitigation strategies.
• Develop and maintain policies for GDPR, SOC 2, and CCPA compliance.
• Manage preparation and submission of compliance reports to internal and external stakeholders.
• Oversee internal security awareness and phishing simulation programs.
• Maintain CSA CAIQ and lead responses to compliance violations through corrective action plans.

Required Skills

• Minimum 10 years of experience in a GRC-focused role managing compliance programs.
• Deep understanding of IT security principles and cloud computing environments.
• Hands-on experience with GDPR, SOC 2, and CAIQ frameworks.
• Ability to work at least half the day during US hours to collaborate with global teams.
• Proven leadership experience managing teams and cross-departmental projects.
• Strong communication skills for conveying complex compliance issues to stakeholders.

Preferred Skills

• Professional certifications such as CISSP or CGEIT.

Key Skills

Education

ANY GRADUATE