Compliance Manager

As a Compliance Manager at Polly, your primary responsibilities will include executing our data governance strategy, drafting and implementing compliance policies, managing compliance audits and assessments, and leading initiatives focusing on AI regulatory compliance. You will foster a culture of compliance across the organization and help establish strong ties with the engineering and InfoSec teams, ensuring compliance is integrated into all operations.

To qualify for the Compliance Manager role at Polly, you should have at least 5 years of technical compliance experience and a minimum of 3 years performing compliance audits. Knowledge of frameworks like SOC2 and ISO is crucial, along with technical familiarity with AWS, Drata, and KnowBe4. Excellent project management skills and the ability to articulate compliance concepts are essential for success in this position.

At Polly, you will play a significant role in nurturing a culture of compliance by working collaboratively with various departments. As a Compliance Manager, you'll need to communicate the importance of compliance to all members of the organization, ensuring that everyone understands and adheres to our policies and practices. Building relationships with teams across the company will be key to achieving this.

Polly prefers candidates with experience in high-pressure, regulated industries, especially FinTech. Familiarity with privacy laws and emerging technologies will strengthen your application. If you have a background in Information Security Governance, Risk, and Compliance, you'll also find this role to be a great fit!

As a Compliance Manager at Polly, you'll enjoy competitive salaries and outstanding benefits such as 100% paid medical, vision, dental, and life insurance for full-time employees. You will also have a flexible vacation policy and the opportunity to work in a hybrid environment, allowing you to maintain work-life balance while participating in innovation initiatives.

When answering this question, highlight specific compliance audits you’ve managed or participated in, detailing your role in the process and the outcomes. Emphasize any particular frameworks you are experienced with, such as SOC2 or ISO, and how you handled challenges that arose during the audits.

Demonstrating that you stay informed about the latest regulations is crucial. Discuss your methods, which might include attending webinars, subscribing to industry newsletters, or participating in professional organizations. Mention specific resources that provide updates on regulations relevant to the Compliance Manager role.

In your response, outline a structured approach. Start with assessing the current compliance environment, planning the policy development process, engaging stakeholders, drafting the policy, and finally, rolling out training sessions to ensure everyone understands the new guidelines.

Talk about your project management skills and experience in leading cross-functional teams. Highlight techniques you use to ensure alignment, such as regular check-ins, collaborative tools, and clear communication strategies to keep everyone informed and involved.

Focus on a specific challenge you've encountered and provide context around it. Explain how you approached the issue, the steps you took to resolve it, and the ultimate outcome, emphasizing your role in turning a challenge into a successful resolution.

Discuss your hands-on experience in creating or implementing data governance frameworks. Highlight any related projects, emphasizing the importance of data security and privacy in your work, and how you have assessed and mitigated risks.

Illustrate your strategies for creating a compliance-oriented environment. This might include regular training sessions, open channels for discussing compliance concerns, and integrating compliance discussions into team meetings, showing your commitment to making it a shared responsibility.

List relevant tools that you have worked with, such as AWS for cloud compliance or vendor management solutions like Drata and KnowBe4. Be prepared to discuss how you utilized these tools to enhance compliance processes.

Explain the steps you take to assess vendor compliance, such as conducting audits, reviewing security policies, and ensuring vendors understand their compliance responsibilities. Share an example of how you have addressed non-compliance with a vendor.

Discuss your understanding of evolving compliance frameworks, particularly in the context of AI regulations. Share insights on how you stay informed about these changes and provide examples of how you’ve adapted compliance practices in your previous roles.