Compliance

Job Overview:

We are looking for a dynamic associate with excellent communication skills to oversee and align Orion's global compliance initiatives with organizational goals. The ideal candidate will possess expertise in industry certifications, internal audits, and process improvements, ensuring adherence to global regulatory requirements.

Key Responsibilities:

• Works independently, exhibit strong leadership and communication skills when interacting with internal and external stakeholders and auditors. Essential: Possess knowledge and experience in implementing industry-standard certifications and attestations such as ISO-27001, SOC1/SOC2, and PCI-DSS.
• Conduct and oversee internal audits, including SQA, project audits, department audits, ensuring compliance with regulatory requirements like GDPR, CCPA, and DORA.
• Demonstrate excellent knowledge in conducting risk assessments, planning audits and perform Data Protection Impact Assessments (DPIA).
• Play a pivotal role in annual Business Continuity Planning (BCP) and Incident Management exercises.
• A high-level overview in Cloud Security and AI audits.
• Continuously review and improve internal policies, procedures, and standards to establish a clear framework for addressing gaps between the current and desired states.

Key Skills:

• Compliance Expertise (ISO-27001, SOC1/SOC2, PCI-DSS)
• Internal Auditing (Project, Department, Process Audits) is a must Regulatory Knowledge (GDPR, UK, Swiss Privacy Laws, DORA)
• Process Improvement & Gap Analysis

Preferred Qualifications:

• Any Industry standard certifications like CISSP, CISA, CISM, or similar.
• Bachelor's degree in information security, Cybersecurity, or a related field.
• High level knowledge of ESG Governance and framework