- Company Name
- Robertson & Company Ltd.
- Job Title
- Senior Compliance Officer
- Job Description
-
**Job Title**
Senior Compliance Officer – Cloud Services
**Role Summary**
Lead the design, execution, and continuous improvement of cybersecurity compliance programs for cloud services. Act as the primary liaison with auditors, regulatory bodies, and internal stakeholders to ensure adherence to ISO 27001, SOC 2, PCI DSS, and other applicable standards. Provide strategic risk management, policy development, and compliance advisory to cloud‑focused business units.
**Expectations**
- Deliver audit‑ready controls and documentation that meet corporate and regulatory requirements.
- Proactively identify risks, recommend mitigations, and monitor corrective actions for cloud environments.
- Serve as trusted advisor to cross‑functional teams and external customers on complex compliance matters.
**Key Responsibilities**
- Lead internal and external audit activities for assigned cloud services, ensuring compliance with corporate policies and regulations.
- Develop risk‑based audit plans, execute audits, and produce detailed findings and remediation roadmaps.
- Develop, maintain, and update governance documents (ISMS, ISO 27017/18, SOC 2, PCI DSS).
- Design and oversee change management, BCP, and DR controls for cloud services.
- Draft, review, and endorse cybersecurity policies, standards, and procedures.
- Partner with cross‑functional teams to analyze and implement global compliance requirements (GDPR, CCPA, etc.).
- Advise product, sales, and pre‑sales teams on compliance for RFPs, RFIs, and client inquiries.
- Engage customers and regulators to address compliance questions and report audit results.
- Oversee ongoing monitoring of compliance programs and deliver executive dashboards on risk status and remediation progress.
**Required Skills**
- 7+ years of cybersecurity compliance, risk management, or information security experience.
- Proven experience in cloud computing or SaaS environments.
- Deep knowledge of ISO 27001, SOC 2, PCI DSS, and related frameworks.
- Strong audit management, risk assessment, and remediation planning skills.
- Excellent stakeholder communication, presenting audit findings and recommendations.
- Ability to influence cross‑functional teams and drive compliance culture.
**Required Education & Certifications**
- Bachelor’s degree in Information Security, Compliance, or related field (preferred).
- Certified Information Systems Auditor (CISA) or equivalent (CISM, CRISC) required; additional certifications (ISO 27001 Lead Auditor, SOC 2 Lead Auditor, PCI Professional) are a plus.
---