Risk and Compliance Specialist

Responsibilities:
• Confirm vendor controls and advise remediation activities. Prioritize, log, report all events, progress, and challenges regularly to higher management.
• Overseeing the design and implementation of the Vendor risk assessment program and liaising with outside vendors/suppliers regarding security and compliance measures.
• Provide Subject-Matter-Expert guidance on the org-wide risk management program and risk appetite.
• Perform Gap Analysis and Risk Assessment as per the defined scope.
• Own all aspects of the compliance requirements, including the management and implementation of the key controls of PCI-DSS, ISO 27001, SOC 2 across our group of companies.
• Effectively write and communicate audit, assessment or compliance results, findings, and recommendations to stakeholders.
• Execute projects related to data privacy gap assessments/Audits.
• Periodic review and revision of all company policies and procedures.
• Development of data privacy framework including TOM, policies, procedures, and templates
• Development & implementation of data privacy processes (e.g., Consent Management, DSAR requests, Data Privacy incident management, etc.)
• Leveraging engineering principles to address compliance challenges.