Compliance Manager
Core
Senior generalist Compliance Manager building policies, SOPs, and operating rhythms across AI Governance, Data Governance, Trade Compliance, Privacy, and Corporate Compliance pillars to ensure regulatory defensibility and operational speed.
Role type
Senior generalist Compliance Manager (GRC)
Builds
Compliance policies, SOPs, training materials, and monitoring programs for AI governance, data privacy, trade compliance, and corporate risk.
Domain
AI & Technology, Regulatory Compliance, Risk Management
Required skills
GRC compliance, security frameworks (SOC 2, ISO 27001, NIST), TPRM/vendor risk management, policy drafting, regulatory tracking, cross-functional partnership, process gap analysis, GRC tooling.
Preferred skills
AI governance, data privacy (GDPR/CCPA), export controls (ITAR/EAR), federal contracting (CMMC, FAR/DFARS), startup environment experience.
Technologies
Vanta, GRC platforms, compliance automation tools. (via careerplan.io/jobs/71dafad6-f8d5-45b1-a418-9c8cc7e43c39-compliance-manager-at-reflection)
Responsibilities
Stand up and maintain compliance processes and SOPs across multiple pillars; support security framework compliance posture (SOC 2, ISO 27001, NIST) by maintaining evidence and coordinating audits; own or support day-to-day TPRM operations including vendor questionnaires and risk tiering; respond to customer and partner security/compliance questionnaires; partner with pillar leads to fill gaps and cover surge work; draft and maintain policies, process documentation, and training materials; track regulatory developments and translate them into internal workstreams; prepare materials for leadership and cross-functional updates; identify process gaps and build scaffolding to close them.
Seniority
Senior, hands-on IC
