Job Title

1 Regulatory Compliance Monitoring:o Ensure the technology department complies with relevant laws and regulations, such as GDPR, ISO 27001, ISO 27701, SoC2 Type 2, ISO 9001 and other data protection or cybersecurity laws.o Stay updated on new or changing regulations that impact the tech landscape.2. Policy Development & Enforcement:o Develop and implement internal policies and procedures to ensure compliance with external regulations and internal standards.o Regularly review and update policies to ensure they remain aligned with changing regulations and industry best practices.3. Risk Management:o Assess risks related to technology operations, particularly data privacy and cybersecurity risks.o Ensure that the tech department implements appropriate security measures to mitigate potential threats and risks.o Conduct regular audits and reviews of IT systems to ensure they meet compliance standards.4. Training & Awareness:o Educate and train technology teams and other employees on compliance-related matters, such as data security, privacy policies, and risk mitigation strategies.o Promote awareness of compliance issues, helping staff understand their responsibilities in maintaining compliance.5. Audit & Reporting:o Prepare reports for management, regulators, or auditors, demonstrating compliance with relevant regulations and policies.o Coordinate internal and external audits related to technology compliance.o Implement corrective actions where necessary to address non-compliance findings.6. Data Privacy Management:o Oversee data protection strategies and ensure proper handling of sensitive information, including encryption, access control, and data retention policies.o Manage consent collection and user privacy preferences in accordance with privacy regulations.7. Incident Management:o Oversee the handling of data breaches or other incidents that might affect compliance, ensuring timely reporting and response in accordance with regulatory requirements.o Coordinate with relevant authorities if there is a need to disclose any breaches or security incidents.