Назад
Company hidden
1 день назад

Senior Compliance Specialist (Digital Technology Risk & Compliance)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Compliance Specialist (Digital Technology Risk & Compliance): Managing a multi-framework compliance program covering SOX, TISAX, CMMC, NIS2, and ISO 27001 with an accent on governance, audit coordination, control testing, and remediation tracking. Focus on mapping controls across frameworks, coordinating evidence and certifications, and providing leadership with clear compliance posture reporting.

Location: Hybrid, Wilmington, Delaware, United States

Company

hirify.global develops materials and solutions for advanced electronics and high-tech industries.

What you will do

  • Support the Digital Technology compliance program, including its operating model, annual plan, compliance calendar, performance indicators, dashboards, governance meetings, and action-item tracking.
  • Coordinate SOX 404 IT compliance activities covering IT general controls, IT application controls, automated controls, testing, evidence collection, deficiencies, and remediation.
  • Plan, govern, and report on compliance across SOX, TISAX, CMMC, NIS2, and ISO 27001.
  • Use the Unified Controls Framework to map and rationalize controls, reducing duplicate testing and evidence requests.
  • Partner with business, IT, Legal, Security, Internal Audit, Finance, HR, facilities, engineering, and operations teams to embed compliance requirements.
  • Monitor corrective actions, escalate overdue or high-risk items, support awareness and training, and identify process improvements through GRC tools and automation.

Requirements

  • Bachelor’s degree required; Information Security, Risk Management, or a related field preferred.
  • 8+ years of experience in compliance, risk management, audit, governance, or information security, including managing compliance programs preferred.
  • Experience with one or more of SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
  • Knowledge of SOX, TISAX, CMMC/NIST SP 800-171, NIS2, and ISO 27001 for assessing compliance and driving remediation.
  • Experience coordinating audits, assessments, and certifications from planning and evidence collection through findings remediation.
  • Ability to communicate clearly and compellingly, analyze issues, plan compliance commitments, collaborate across functions, influence stakeholders without direct authority, and maintain current knowledge of regulatory and cybersecurity requirements.

Nice to have

  • Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer.
  • Experience with GRC tools such as Optro, OneTrust, or ServiceNow.

Culture & Benefits

  • Hybrid work arrangement in Wilmington, Delaware.
  • Cross-functional collaboration across business, technology, legal, security, audit, finance, and operations.
  • Comprehensive pay and benefits package.
  • Equal opportunity employment and reasonable accommodation support for applicants.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →