Director, Global Regulatory & Compliance Operations
Job Details
- Experience
- At least 10 years of experience in regulatory compliance, risk management, corporate governance, or a related discipline, including a minimum of 3 years in a leadership role.
Requirements
- Bachelor's degree in Business, Law, Finance, Information Management, or a related field.
- At least 10 years of experience in regulatory compliance, risk management, corporate governance, or a related discipline.
- At least 3 years of experience in a leadership role.
- Experience managing multi-jurisdictional compliance programs, ideally covering North America and India.
- Working knowledge of GDPR, PIPEDA, Quebec Law 25, and applicable US state privacy laws.
- Knowledge of anti-bribery and anti-corruption requirements, including ABAC and FCPA, and corporate entity governance.
- Experience owning or leading SOC 2, ISO 27001, or comparable compliance audits and attestations.
- Project management skills and ability to design, implement, and scale compliance programs and processes.
- Preferred: Juris Doctor or relevant certifications such as CIPP, CIPM, CCEP, CRCM, or CISA.
- Preferred: SaaS or technology company experience.
- Preferred: Familiarity with the NIST AI Risk Management Framework, ISO 42001, and the EU AI Act.
- Preferred: Experience with GRC platforms such as Vanta, Drata, or OneTrust.
Responsibilities
- Design, implement, and improve an enterprise-wide compliance framework covering policies, procedures, internal controls, risk assessments, monitoring, and reporting.
- Maintain a regulatory obligations register and compliance calendar for the United States, Canada, India, and other relevant jurisdictions.
- Lead corporate and entity governance activities and oversee global data privacy compliance.
- Develop anti-bribery and anti-corruption policies, ethics programs, and related controls.
- Establish enterprise AI governance policies and processes.
- Coordinate readiness and audits for SOC 2, ISO 27001, and other relevant security frameworks.
- Partner with IT and Security teams on audit evidence, control ownership, gaps, and assessments.
- Standardize responses to customer security assessments, compliance questionnaires, RFPs, and contractual compliance obligations.
- Establish compliance training and monitor completion across regions and employee populations.
- Monitor regulatory developments and provide executive reporting on risks, control effectiveness, program status, and remediation.