Risk and Compliance Specialist
Core
Own the day-to-day compliance program, lead audits (SOC 2, PCI DSS), manage risk assessments, and serve as the primary point of contact for data privacy and security inquiries.
Role type
Senior IC Risk and Compliance Specialist
Builds
Compliance frameworks, audit evidence, risk mitigation plans, and privacy documentation
Domain
SaaS / Technology / Data Privacy
Required skills
SOC 2 program management, PCI DSS knowledge, GDPR experience, risk assessment, vendor risk management, data governance, RFP security questionnaires, privacy policy management, cross-functional collaboration
Preferred skills
Canadian privacy law knowledge, CIPP/C or CIPM certification, cybersecurity knowledge, IT/SaaS compliance background
Technologies
Microsoft 365, AI tools
Responsibilities
Lead SOC 2 and PCI DSS audits, own control documentation, lead risk assessments, review in-scope vendors, manage privacy inboxes, update privacy policies and subprocessor lists, complete security questionnaires, partner with IT on risk solutions
Seniority
Mid-level, hands-on IC
