Compliance Consultant

Company Description

We are looking for a consultant who can help Sigma Software in providing the highest level of information security and compliance expertise to our clients. 

We need help in one or more of the following areas:  

• Information Security Management 
• Privacy and Personal Data Protection 
• Business Continuity Management
• AI Compliance

Job Description

To be successful in this position, you will need to carry out the following activities: 

• Leading and overseeing compliance projects in accordance with relevant regulations and standards. 
• Implementing, developing, and supporting management systems, i.e. ISMS, BCMS, and QMS. 
• Exploring, implementing, and supporting privacy requirements to ensure alignment with data protection regulations. 
• Developing and implementing comprehensive policies and procedures that align with regulatory requirements and monitoring and assessing compliance managers' documented policies. 
• Leading and conducting thorough audits to identify areas of risk, non-compliance, and opportunities for improvement. 
• Providing recommendations for corrective actions. 
• Collaborating with relevant stakeholders to perform risk management. 
• Developing, updating, and implementing advanced compliance training programs for employees across all levels while managing compliance managers' support for the awareness program. 
• Investigating, resolving, and providing guidance for compliance managers on complex requests and complaints, ensuring appropriate corrective actions are taken. 
• Investigating and implementing automation of compliance processes. 

Qualifications

• In-depth knowledge of one or more of the relevant standards, i.e. ISO 27001, SOC2, OWASP SAMM, ISO 27701, ISO 22301, ISO 9001, ISO 42001.
• 5-7 years of experience in compliance management, with a focus on Information Security, Privacy, and BCP. 
• Experience in passing external certifications. 
• Excellent communication skills with the ability to explain compliance requirements in clear and understandable language for all stakeholders. 
• Advanced analytical skills. 
• Experience with GRC/Compliance Software.