Compliance Analyst

Locus Robotics • Wilmington, MA

3h

About The Position

Locus Robotics is a global leader in warehouse automation, delivering unmatched flexibility and unlimited throughput, and actionable intelligence to optimize operations. Powered by LocusONE, an AI-driven platform, our advanced autonomous mobile robots seamlessly integrate into existing warehouse environments to enhance efficiency, reduce costs, and scale operations with ease. Trusted by over 150 industry-leading retail, healthcare, 3PL, and industrial brands in over 350 sites worldwide, Locus enables warehouse operators to achieve rapid ROI, minimize labor costs, and continuously improve productivity. Our industry-first Robots-as-a-Service (RaaS) model ensures ongoing innovation, scalability, and cost-effectiveness without the burden of significant capital investments. With proven capabilities in diverse workflows—from picking and replenishment to sorting and pack-out—Locus Robotics empowers businesses to meet peak demands and adapt to ever-changing operational needs. Locus Robotics is seeking a results-oriented Compliance Analyst to help execute compliance initiatives, ensuring compliance standards are met and customer needs are satisfied. All this is accomplished while integrating with the operator’s Warehouse Management System, utilizing and optimizing existing facility infrastructure. This is an opportunity to join the ranks of a brilliant, high-performance team, deploying cutting-edge technology to address real-world logistics challenges for major global brands. You will develop and manage compliance initiatives, partner with sales and contracting on new contract compliance responses, and collaborate with cross-functional teams and company leadership to proactively anticipate and identify compliance requirements. Assist in developing key compliance programs covering applicable laws, rules, and regulations; internal policies and procedures; accepted business practices; ethical standards; and contractual obligations.

Requirements

• BS or Master’s in a technology-related field and a professional security certification such as CISA, CISM, CDPSE, CISSP.
• Familiarity with IT compliance legislation, including GDPR and similar regulations or statutes, and ability to leverage other internal/external resources.
• Minimum 3+ years’ experience working in a combination of compliance, risk, and information security positions.
• Working knowledge of common information security management frameworks, such as NIST.
• Excellent written and verbal communication skills and a high level of personal integrity

Nice To Haves

• Knowledge of internal controls environments and how that drives a SOC2 Type II attestation is a plus.
• Knowledge of ISO 27001 is a plus.
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.

Responsibilities

• Provide subject matter expertise in the creation, implementation, and maintenance of appropriate enterprise programs, policies, and procedures to be compliant with all applicable regulations, including GDPR, CCPA, SOC2, HIPAA, PCI
• Serve as the primary point of contact for responding to customer security questionnaires, RFPs, and due diligence requests.
• Assist team members and internal clients in addressing highly complex security and compliance issues applicable to enterprise environments
• Develop, implement, maintain, and oversee enforcement of security policies
• Conduct regularly scheduled audits on systems and host third-party audits as required in order to achieve certifications.
• Define the requirements and validate the procedures and audit testing methodology
• Work very closely with many cross-functional teams to communicate and integrate control requirements (Finance, Product, IT, Legal, Supply Chain).
• Have the ability to utilize working knowledge of information security best practices such as: NIST 800 series, ISO 27001 series, GDPR, etc.
• Interpret standards, requirements, and their application to the overall enterprise environment in the most reasonable and cost-effective manner
• Collaborate with technology architects, engineering, and security teams to define and implement security processes and procedures based on industry-standard best practices and compliance requirements.
• Work with cross-functional teams to prepare ongoing client reporting, information for prospects, and marketing materials
• Provide training to teams as needed

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level