Senior IT Compliance Officer

at  EnterpriseAlumni

We are seeking a highly skilled and experienced Senior IT Compliance Officer to join our team. The ideal candidate will be responsible for overseeing and ensuring compliance with various IT standards, regulations, and best practices, including ISO 27001, SOC 2, Cyber Essentials, and other relevant frameworks. This role requires a blend of technical expertise, leadership abilities, and legal acumen to effectively manage compliance activities within our organization.

REQUIREMENTS:

• Proven experience in IT compliance and security, with a strong understanding of ISO 27001, SOC 2, Cyber Essentials, and other relevant standards.
• Demonstrated ability to lead audit processes, including planning, execution, and follow-up activities.
• Familiarity with legal and regulatory requirements related to data privacy, security, and IT governance.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with diverse stakeholders.
• Strong analytical and problem-solving abilities, with a keen attention to detail.
• Experience in process improvement, change management, access control, and incident management.
• Fluent in English (reading and writing) with exceptional written and verbal communication skills.

• Audit Management: Lead and coordinate audits for ISO 27001, SOC 2, Cyber Essentials, and other relevant standards. Collaborate with external auditors and internal stakeholders to ensure successful audit outcomes.
• Internal Controls: Develop, implement, and maintain internal security and compliance controls. Conduct regular assessments to identify gaps and areas for improvement, and take proactive measures to address deficiencies.
• Risk Management: Lead the organization’s risk management efforts by identifying potential risks, assessing their impact, and developing strategies to mitigate them. Stay abreast of emerging threats and regulatory changes to adapt risk management practices accordingly.
• Legal Compliance: Work closely with legal counsel to ensure compliance with relevant laws, regulations, and data privacy requirements. Assist in drafting contracts, policies, and procedures to support legal compliance efforts.
• Process Improvement: Drive continuous improvement initiatives related to IT compliance and security processes. Streamline workflows, optimize resources, and implement best practices to enhance overall efficiency and effectiveness.
• Change Management: Oversee change management processes to ensure that changes to IT systems and processes are implemented in a controlled and compliant manner. Minimize disruption and maintain the integrity of systems and data throughout the change lifecycle.
• Access Control: Manage access control mechanisms to safeguard sensitive information and prevent unauthorized access. Implement access control policies and procedures in alignment with industry standards and regulatory requirements.
• Incident Management: Develop and maintain incident response plans to address security incidents and breaches effectively. Coordinate response efforts, conduct post-incident reviews, and implement corrective actions to prevent recurrence.