Regulatory Risk & Compliance Specialist IV

Oracle • Arlington, VA

4d

About The Position

The Compliance Manager develops, implements, monitors, and continuously improves the organization’s compliance program. The role ensures that business activities, policies, procedures, and records comply with applicable laws, regulations, contractual obligations, and internal standards. It applies advanced compliance and risk expertise to business operations, independently leading moderately complex projects and exercising judgment on issues involving multiple variables and potential outcomes. The position also contributes to AI governance assessments and controls, mentors colleagues, and reviews work for quality without formal people-management responsibilities.

The role involves working across Legal, Finance, HR, IT, Security, Operations, and other departments, as well as with technical, privacy, security, legal, business, leadership, and external peers. The position requires the ability to travel and to adapt to changing priorities in a dynamic environment.

Requirements

• Advanced knowledge of compliance duties, systems, and procedures, including broad knowledge of at least one compliance or risk specialty and the ability to apply that expertise to business operations.
• Typically 12+ years of relevant experience in compliance, risk management, audit, governance, or a closely related field.
• Demonstrated ability to independently lead moderately complex risk or compliance projects from scoping and analysis through implementation, reporting, and follow-up.
• Hands-on experience assessing risks and controls, developing actionable mitigation plans, maintaining defensible documentation, and validating remediation effectiveness.
• Demonstrated ability to influence stakeholders across related teams or lines of business, explain tradeoffs clearly, and provide evidence-based recommendations to management.
• Experience improving processes, soliciting diverse perspectives, mentoring colleagues, and reviewing work for quality; strong analytical, writing, presentation, and organizational skills.
• Ability to travel.
• A BA/BS or advanced degree is preferred in the qualifications section.
• Five to seven years of work in governance and compliance for a large corporation is listed in the qualifications section.
• Strong knowledge of IT and/or quality auditing and controls; experience with standards or frameworks such as SOX, SSAE 16/SOC 1 and SOC 2, PCI, NIST, DIACAP, FedRAMP, ISO 27001, ISO 27002, ISO 9001, and/or ISO 13485.
• Experience with 21 CFR Part 11 and HIPAA.
• Knowledge of delivery processes for validated systems, specifically computer system validation (CSV).
• Understanding of security and/or quality management system standards and risk management.
• Experience working in Information Technology, cloud, or managed hosting services.
• Excellent written and verbal communication skills; ability to adapt to changing priorities in a dynamic environment.
• Technical acumen, including the ability to understand and interpret technical specifications.
• Technical knowledge of Oracle Applications and Database and/or infrastructure components.
• Project management skills.

Nice To Haves

• Experience working at the intersection of federal and commercial contracting.
• Practical experience supporting AI governance or responsible AI initiatives, such as AI use case intake, risk assessment, third-party AI reviews, governance procedures, human oversight, monitoring, or incident escalation.
• Experience working with technical, privacy, security, legal, and business partners to assess AI risks such as data handling, bias, reliability, transparency, and appropriate human oversight.
• CISA, CISM, CISSP, CIPP, RAC, CQE, CPPS, and/or CQA certifications are desired.
• A BA/BS or advanced degree is preferred.

Responsibilities

• Maintain awareness of applicable regulatory requirements and evaluate their impact on the organization.
• Develop, update, and administer compliance policies, procedures, controls, and training materials.
• Assess operational activities, emerging requirements, and proposed business changes for compliance risk.
• Respond to risk and compliance requests and support solutioning sessions to improve operational efficiency and effectiveness within the compliance framework.
• Present evidence, risk implications, options, and recommendations to relevant teams; provide input to management decisions and build relationships with leadership and external peers.
• Conduct periodic compliance risk assessments, develop and maintain the risk register, track remediation activities to closure, and validate corrective-action effectiveness.
• Lead or support internal compliance audits, reviews, and investigations.
• Coordinate responses to regulatory examinations, customer audits, and compliance-related information requests.
• Investigate reported concerns, document findings, and coordinate corrective and preventive actions.
• Deliver compliance training and awareness programs for employees, managers, and relevant third parties.
• Work with Legal, Finance, HR, IT, Security, Operations, and other departments to embed compliance requirements into business processes.
• Lead third-party compliance risk assessments and mitigation workstreams, including risk-based due diligence, verification checks, issue escalation, and ongoing monitoring.
• Exercise independent judgment on moderately complex issues; evaluate alternatives and tradeoffs, recommend a course of action, and escalate matters beyond delegated authority.
• Seek diverse viewpoints and feedback, mentor junior colleagues, review assigned work for quality, and oversee task execution without formal people-management responsibilities.
• Contribute to AI governance assessments and controls by coordinating with business and technical owners on intended uses, risk documentation, oversight, monitoring, and escalation.
• Perform other duties as assigned.
• Lead moderately complex risk or compliance projects from scoping and analysis through implementation, reporting, and follow-up.
• Assess risks and controls, develop mitigation plans, maintain defensible documentation, and validate remediation effectiveness.
• Improve processes, influence stakeholders, and provide evidence-based recommendations to management.

Benefits

• Competitive benefits supporting employees with flexible medical, life insurance, and retirement options.
• Volunteer programs that encourage employees to give back to their communities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior