Senior Technology Compliance Product Owner

What you'll do

• Perform information security assessments covering domains like access management, network security, encryption, and disaster recovery.
• Draft compliance reports summarizing objectives and findings while working with teams to remediate identified issues.
• Liaise with external auditors and customers to provide assurance regarding the company's security compliance program.
• Identify internal control issues, define root causes, and ensure controls are properly documented.
• Expand and refine the Common Control Framework to meet evolving industry standards and organizational needs.
• Document audit procedures to ensure consistent methodology and accurate conclusions are reached.
• Partner with GRC Engineering to develop integrations, dashboards, and reports for real-time risk awareness.
• Create KPIs and reporting frameworks to provide executives with actionable insights for decision-making.

What we're looking for

• Bachelor's or master's degree in Information Technology, Computer Science, or a related field (or equivalent experience).
• Minimum 6-12 years of experience in a related field.
• Hands-on experience with AWS, Azure, and GCP environments.
• Knowledge of compliance frameworks such as PCI DSS, BSI C5, Spain ENS, and CyberEssentials+.
• Expertise with AI compliance frameworks including ISO 42001, NIST AI RMF, and CSA AICM.
• Knowledge of core IT processes like SDLC, Identity/User Access management, and Backup and DR processes (preferred).
• Strong interpersonal, verbal, and written communication skills.
• Ability to think critically and creatively while independently assessing risk.