Senior Compliance Officer

Description

The Senior Cloud Services Compliance Officer is responsible for leading and overseeing cybersecurity compliance initiatives across assigned Cloud Services. This role focuses on managing complex internal and external audits, customer security and compliance assessments, regulatory compliance, and internal security and privacy programs.

Working closely with senior leadership, cross-functional teams, and external stakeholders, the Senior Compliance Officer ensures adherence to internal policies, industry standards, and regulatory requirements across multiple jurisdictions. This role also contributes to the strategic direction of compliance practices, driving continuous improvement and strengthening risk management within Cloud Services operations.

• Plan, prepare, and execute internal and external audits, ensuring compliance with corporate policies, industry standards, and regulatory requirements.
• Act as the primary point of contact for all compliance and audit activities related to assigned Cloud Services.
• Collaborate with cross-functional teams to assess and address cybersecurity and privacy requirements across regions.
• Engage directly with customers to address compliance inquiries and support trust-building initiatives.
• Support and improve Change Management, Business Continuity Planning (BCP), and Disaster Recovery (DR) controls in alignment with corporate standards and regulatory best practices.
• Oversee continuous monitoring of compliance programs to ensure ongoing effectiveness.
• Support global compliance initiatives, ensuring awareness of evolving cybersecurity and data privacy regulations (e.g., GDPR, CCPA) and compliance with cross-border data transfer requirements.
• Lead risk management initiatives and enhance security controls for assigned Cloud Services.
• Support the development, implementation, and ongoing maintenance of cybersecurity compliance programs aligned with corporate objectives and regional regulations.
• Support the development, review, and implementation of cybersecurity compliance policies, standards, and procedures.
• Drive improvements to compliance workflows to enhance audit readiness, operational efficiency, and risk mitigation.
• Maintain governance, risk, and compliance documentation, including ISMS (ISO 27001) and ISO 27017/27018 mandatory artifacts.
• Prepare and present compliance reports to senior management, highlighting audit outcomes, risk exposure, and remediation status.
• Lead engagements with internal and external auditors, including regulatory bodies, internal audit teams, and third-party auditors.
• Provide cybersecurity compliance guidance to sales, presales, product management, and other business units, including support for RFPs, RFIs, and customer security questionnaires.
• Develop and implement proactive, risk-based audit strategies aligned with business priorities and continuous improvement objectives.
• Serve as a trusted advisor on complex compliance and security matters, recommending risk mitigation and process improvements.

Requirements

• Strong knowledge of information security standards and frameworks, including ISO 27001, ISO 27017/27018, SOC 2, FedRAMP, CSA, PCI DSS, and data privacy regulations (e.g., GDPR).
• Excellent written and verbal communication skills, with the ability to translate complex technical findings for non-technical audiences.
• Strategic mindset with a focus on risk mitigation, continuous improvement, and alignment with business objectives.
• Demonstrated experience leading internal and external audits, including risk assessments and remediation efforts.
• Strong communication and stakeholder management skills, with experience engaging senior leadership, auditors, and regulators.
• 7+ years of experience in cybersecurity compliance, preferably within cloud services environments.
• Professional certifications such as CISA, CISM, CRISC, or equivalent.
• Proven leadership in managing complex audits and cross-functional initiatives.
• 7–10 years of experience in cybersecurity compliance, risk management, or information security, ideally in cloud or SaaS environments.
• Solid understanding of cloud platforms and security fundamentals (AWS, Azure, GCP).
• Advanced expertise in compliance standards and frameworks (ISO 27001, SOC 2, PCI DSS, GDPR, NIST).

Benefits

Pay Rate: $51.50/hour

Minimum Qualifications

Training + Development

Interview process

Visa Sponsorship

Security clearance