Compliance Analyst

Locus Robotics•Wilmington, MA

About The Position

Locus Robotics is a leader in the rapidly growing eCommerce order fulfillment optimization space. Our solution helps warehouse owners attain 2-3X efficiency improvement over cart-picking operations, by empowering pickers to work collaboratively with our robots. All this is accomplished while integrating with the operator’s Warehouse Management System, utilizing and optimizing existing facility infrastructure. This is an opportunity to join the ranks of a brilliant, high performance team, deploying cutting-edge technology to address real-world logistics challenges for major global brands. You will develop and manage compliance initiatives, work with sales and contracting on new contract compliance responses and interact with cross-functional teams and company leadership while anticipating and identifying compliance requirements. Assist in developing key compliance programs covering applicable laws, rules, and regulations; internal policies and procedures; accepted business practices; ethical standards; and contractual obligations. Locus Robotics seeks a results-oriented Compliance Analyst to help execute compliance initiatives, ensuring compliance standards are met, and customer needs are satisfied. Why? This role is perfect for someone who is eager to develop their skills and deepen their expertise. You’ll bring your existing passion and knowledge to the team, and for anything you don’t yet know, you’ll be supported with hands-on learning, mentorship, and training. If you’re not already certified, we’ll help you get there.

Requirements

BS or Masters in a technology-related field and a professional security certification such as CISA, CISM, CDPSE, CISSP is a plus but not necessary as long as you're willing to get certified.
Familiar with IT Compliance legislation, including GDPR and similar regulations or statutes, and ability to leverage other internal/external resources.
Minimum 3+ years’ experience working in a combination of compliance, risk and information security positions.
Working knowledge of common information security management frameworks, such as NIST.
Excellent written and verbal communication skills and high level of personal integrity

Nice To Haves

Knowledge of the internal controls environments and how that drives a SOC2 Type II attestation a plus.
Knowledge of ISO 27001 a plus.
Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.

Responsibilities

Providing subject matter expertise in the creation, implementation, and maintenance of appropriate enterprise programs, policies, and procedures to be compliant with all applicable regulations including GDPR, CCPA, SOC2, HIPAA, PCI
Serve as the primary point of contact for responding to customer security questionnaires, RFPs, and due diligence requests.
Assisting team members and internal clients in addressing highly complex security and compliance issues applicable to enterprise environment
Developing, implementing, maintaining, and overseeing enforcement of security policies
Conducting regularly scheduled audits on systems and hosting third-party audits as required in order to achieve certifications.
Defining the requirements and validating the procedures and audit testing methodology
Work very closely with many cross-functional teams to communicate and integrate control requirements (Finance, Product, IT, Legal, Supply Chain).
Having the ability to utilize working knowledge of information security best practices such as: NIST 800 series, ISO 27001 series, GDPR, etc.
Interpreting standards, requirements, and their application to the overall enterprise environment in the most reasonable and cost-effective manner
Collaborating with technology architects, engineering and security teams to define and implement security processes and procedures based on industry-standard best practices and compliance requirements.
Working with the cross-functional teams to prepare ongoing client reporting, information for prospects and marketing materials
Providing training to teams as needed