-
Design and implement controls and mitigation plans, and lead aspects of their implementation
-
Facilitate reporting on findings, mitigation plans, and controls performance
-
Work with senior management to create their compliance strategy and improve their controls portfolio
-
Identify areas of improvement in facilitating audits with customers to refine the process and respond to customer inquiries promptly
-
Formalise and lead improvements of GRC function operations - processes, metrics, reporting, and analytics
-
Provide regular status updates ensuring everyone is aware of progress and road-blockers
-
Work with product and functional teams to understand and respond to their compliance and assurance needs and concerns
-
Manage compliance related programs including the performance of gap assessments for new compliance frameworks
-
Promote effective teamwork, collaboration, and commitment across the Product Compliance team and the broader organisation
-
Seek opportunities to improve processes and collaboration to increase team output and team health
-
Perform regular risk assessments for your business function
-
Prepare annual audit plans, develop audit direction, and align with stakeholders on audit timetables
-
Develop timeline for internal readiness assessment activities and obtain alignment from all stakeholders
-
Maintain comprehensive documentation of controls, testing procedures, and evidence to support compliance efforts
-
Work closely with internal stakeholders, including product and functional teams, to address architectural, infrastructure, or new services that impact compliance
-
Identify opportunities for process improvements and implement best practices to enhance the efficiency and effectiveness of the readiness testing process
-
Develop controls and mitigation plans, and lead aspects of their implementation
-
Work with senior management to improve their controls portfolio
-
Provide regular status updates ensuring everyone is aware of progress and road-blockers
-
Promote effective teamwork, collaboration, and commitment across the Product Compliance team and the broader organisation
-
Seek opportunities to improve processes and collaboration to increase team output and team health
-
Minimum 8+ years of management experience in IT audit, compliance, or a related field
-
Experience with SOC 2, ISO 27001/27018, HIPAA, PCI, C5 and GDPR frameworks and requirements
-
Familiarity with compliance frameworks and standards such as NIST 800-53
-
Experience with the software development business for cloud service providers
-
Experience with Technology Risk Management, Compliance and Information Security
-
Experience with control and risk frameworks, performing compliance and risk assessments, creating controls and overseeing mitigation projects
-
Experience with translating compliance requirements to engineering and product teams
-
Experience with determining scope, timeline creation, complex project tracking, risk management, and process improvement
-
Familiarity with Jira and Confluence
-
Relevant certifications such as CISM, CISA, CISSP, or ISO 27001 Lead Auditor are highly desirable