Job description
Compliance Director - £130-150k +
Compliance Director - £130-150k + Reading
I have recently partnered with a leading tech firm that is looking for a director of compliance. Your primary focus will be to ensure seamless alignment of all data processing activities with relevant regulatory requirements and contractual agreements. You'll need a strong understanding of data privacy laws and industry best practices, along with an extensive track record in compliance management, exceptional organizational skills, and keen attention to detail.
Key Responsibilities
Data Record Management:
GDPR / CCPA
Compliance Management:
Initiate and maintain Data Impact Assessments (DPIAs, TIAs, PIAs, etc.)
Foster a Privacy by Design culture.
Breach Management:
Assist in Identifying and managing compliance breaches, taking appropriate actions
Implement measures to prevent future breaches
Enhance compliance practices.
Own the corporate Acceptable Usage Policy (AUP)
Collaborate with teams to develop the AUP based on emerging conditions.
Policy and Documentation Management:
Develop and maintain data compliance policies, procedures, and guidelines in alignment with relevant data protection regulations and industry standards.
Conduct regular internal audits to assess the effectiveness of data compliance practices.
Collaborate with stakeholders to implement corrective actions based on audit findings.
Liaise with external audit teams to obtain and maintain compliance standards (e.g., ISO27001 and ISO9001).
Manage collaboration with cross-functional teams and external auditors for successful audits.
Qualifications and Skills:
Proven experience in data compliance management and understanding of data protection laws.
Familiarity with industry standards such as SOC2, ISO27001, and ISO9001.
Effective communication with senior-level executives, cross-functional teams, and clients.
Adaptability to a fast-paced work environment.
Exceptional client communication skills for Security Questionnaires and due diligence.
Professional certifications in data protection and privacy (e.g., CIPP, CIPM, CIPT) required.