Compliance Manager

About the Role:

The Compliance Manager is responsible for designing, implementing, and maintaining a robust data protection and AI governance framework across the organization. The role ensures compliance with GDPR, the EU AI Act (as applicable), and other privacy regulations, while also overseeing certification maintenance and renewals (e.g., ISO 27001:2022, PCI-DSS) and related regulatory requirements.

Working closely with cross-functional teams, the Compliance Manager embeds privacy by design, strengthens organizational awareness and accountability, and ensures the timely and accurate execution of internal audits.

Location:

Key Responsibilities:

• Ensure compliance with ISO 27001:2022, PCI-DSS, GDPR, and other applicable regulations.
• Develop and oversee control systems to prevent or address violations of legal and internal policies.
• Periodically review procedures and reports to identify risks or non-conformities.
• Prepare compliance reports for senior management and regulatory bodies.
• Monitor Eastvantages privacy compliance program.
• Maintain and update internal documentation (e.g., Privacy Policy, Data Protection Policy, Information Security Policy).
• Guide departments in conducting risk assessments.
• Oversee privacy impact assessments and ensure timely corrective actions.
• Ensure timely and compliant submissions to the NPC, including incident reports and data breach notifications, and support resolution efforts.
• Lead and participate in information security awareness campaigns and employee training on data privacy and protection.
• Represent Eastvantage in external engagements related to data protection.
• Serve as a compliance resource for process improvement initiatives.
• Demonstrate strong understanding of continual/system improvement principles.
• Manage Compliance staff overseeing internal audits, SOC requirements, and departmental policies.
• Lead training, development, and performance evaluations of direct reports.

Position Requirements:

• Professional and highly organized.
• At least 8+ years of experience in internal audit and compliance roles.
• Strong knowledge of GDPR, privacy principles, and ideally the EU AI Act.
• Extensive experience with ISO 27001:2022, PCI-DSS, and GDPR compliance.
• Experience in information security management systems, data privacy, and business continuity management.
• Strong understanding of laws and policies related to information security controls and data protection.
• Ability to translate regulations into practical, business-friendly guidance.
• Excellent communication skills with confidence in reporting to executive management.