Senior Compliance Specialist
About The Position
The Senior Compliance Specialist supports Qnity’s Digital Technology Risk & Compliance program. The role plans, governs, and reports on compliance with regulatory and certification requirements, including SOX, TISAX, CMMC, NIS2, and ISO 27001, ensuring obligations are understood, assigned, and met consistently across jurisdictions and business units. The position works across business, IT, Legal, Security, Internal Audit, Finance, and operations teams to maintain the compliance obligations inventory, coordinate audits and certifications, track remediation, and provide leadership with visibility into the company’s compliance posture.
Requirements
- Bachelor’s degree.
- At least 8 years of experience in compliance, risk management, audit, governance, or information security; experience managing compliance programs is preferred.
- Experience with one or more frameworks, including SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
- Working knowledge of SOX, TISAX, CMMC/NIST SP 800-171, NIS2, and ISO 27001 to assess compliance and drive remediation.
- Ability to communicate clearly and compellingly in individual and group settings.
- Ability to analyze issues, problems, and opportunities and develop appropriate solutions.
- Ability to establish action plans, timelines, and priorities and deliver compliance commitments on time.
- Ability to collaborate across functions and influence stakeholders without direct authority.
- Ability to maintain current knowledge of evolving regulatory and cybersecurity requirements and apply it to the program.
Nice To Haves
- Bachelor’s degree preferably in Information Security, Risk Management, or a related field.
- Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer.
- Experience with GRC tools such as Optro, OneTrust, or ServiceNow.
Responsibilities
- Support day-to-day management of the Digital Technology compliance program, including its scope, operating model, and annual compliance plan.
- Plan and manage the compliance calendar for assessments, certifications, and control testing cycles.
- Define and track program performance indicators and prepare status reports and dashboards for leadership and governance forums.
- Facilitate compliance governance meetings and management reviews, tracking decisions and action items through closure.
- Drive compliance awareness and training for control owners and stakeholders.
- Coordinate SOX 404 IT compliance activities for IT General Controls, IT Application Controls, and automated controls, including control testing, evidence collection, deficiency tracking, and remediation, in partnership with Internal Audit, External Audit, Finance, and IT.
- Plan, govern, and report on compliance across regulatory and certification frameworks, including SOX, TISAX, CMMC, NIS2, and ISO 27001.
- Use the Unified Controls Framework to map and rationalize controls across frameworks, reducing duplicate testing and evidence requests.
- Partner with business, IT, Legal, Security, HR, facilities, engineering, and operations teams to embed compliance requirements into day-to-day processes.
- Monitor corrective actions and remediation plans, escalating overdue or high-risk items to leadership.
- Identify opportunities to streamline compliance processes using GRC tools and automation.
- Provide guidance to control owners and compliance team members on compliance requirements and leading practices.
Benefits
- Comprehensive pay and benefits package.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
