Senior Compliance Specialist

Qnity Electronics•Wimington, DE

About The Position

The Senior Compliance Specialist supports Qnity’s Digital Technology Risk & Compliance program. The role plans, governs, and reports on compliance with regulatory and certification obligations—including SOX, TISAX, CMMC, NIS2, and ISO 27001—so requirements are understood, assigned, and consistently met across jurisdictions and business units. The position works with business, IT, Legal, Security, Internal Audit, Finance, and operations teams to maintain the compliance obligations inventory, coordinate audits and certifications, track remediation, and provide leadership with visibility into the company’s compliance posture. The specialist supports the program’s scope, operating model, and annual plan; manages its compliance calendar; tracks performance indicators; prepares status reporting and dashboards; facilitates governance meetings and management reviews; and promotes compliance awareness and training. The position also coordinates SOX 404 IT compliance activities, including ITGCs, ITACs, automated controls, control testing, evidence collection, deficiency tracking, and remediation. It uses the Unified Controls Framework to map and rationalize controls across frameworks and works with stakeholders to embed requirements in daily processes, monitor corrective actions, improve processes through GRC tools and automation, and guide control owners and compliance team members.

Requirements

Bachelor’s degree required; Information Security, Risk Management, or a related field is preferred.
Experience with one or more frameworks, including SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
Strong communication, analysis and judgment, planning and organizing, collaboration and influence, and continuous learning competencies.
Working knowledge of SOX, TISAX, CMMC/NIST SP 800-171, NIS2, and ISO 27001 to assess compliance and drive remediation.
Ability to plan, govern, and report on a multi-framework compliance program, translating obligations into owned controls, timelines, and measurable outcomes.

Nice To Haves

8+ years of experience in compliance, risk management, audit, governance, or information security, including managing compliance programs.
Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer.
Experience with GRC tools such as Optro, OneTrust, or ServiceNow.

Responsibilities

Support day-to-day management of the Digital Technology compliance program, including its scope, operating model, and annual compliance plan.
Plan and manage the compliance calendar for assessments, certifications, and control-testing cycles.
Define and track program performance indicators and prepare compliance status reports and dashboards for leadership and governance forums.
Facilitate compliance governance meetings and management reviews, tracking decisions and action items through closure.
Drive compliance awareness and training for control owners and stakeholders.
Coordinate SOX 404 IT compliance activities for IT General Controls (ITGCs), IT Application Controls (ITACs), and automated controls, including control testing, evidence collection, deficiency tracking, and remediation, in partnership with Internal Audit, External Audit, Finance, and IT.
Plan, govern, and report on compliance across regulatory and certification requirements, including SOX, TISAX, CMMC, NIS2, and ISO 27001.
Use the Unified Controls Framework to map and rationalize controls across frameworks, reducing duplicate testing and evidence requests.
Partner with business, IT, Legal, Security, HR, facilities, engineering, and operations teams to embed compliance requirements into day-to-day processes.
Monitor corrective actions and remediation plans, escalating overdue or high-risk items to leadership.
Identify opportunities to streamline compliance processes through GRC tools and automation.
Provide guidance to control owners and compliance team members on compliance requirements and leading practices.
Coordinate audits, assessments, and certifications from planning and evidence collection through remediation of findings.