Develop and implement robust IT compliance programs aligned with global regulations like GDPR, CCPA, and HIPAA, and ISO 27001 and 20000 ensuring data privacy and security.
Conduct regular risk assessments and audits to identify vulnerabilities in IT systems and processes, proactively mitigating potential breaches.
Translate complex regulatory requirements into actionable IT policies and procedures, fostering a culture of compliance across the organization.
Manage and oversee the implementation of security controls and technologies to safeguard sensitive data and intellectual property.
Desired Candidate Profile
Bachelor's degree in Computer Science, Information Technology, Law, or a related field; Master's degree preferred.
Relevant certifications such as CISA, CISSP, CIPP, or CRISC demonstrating expertise in IT governance and security.
Minimum of 2-3 years of progressive experience in IT compliance, risk management, or information security within a regulated industry.
Proven experience in interpreting and applying complex legal and regulatory frameworks (e.g., GDPR, SOX, PCI DSS).