Compliance Specialist

Overview

PowerPlan is looking for every opportunity to help our customers and prospects gain more value from our suite of software solutions We are looking for Compliance Specialist to join our team and help us protect our network and systems from cyber threats. You will be responsible for ensuring that our cybersecurity practices comply with all relevant laws, regulations, and industry standards. This role involves developing, implementing, and managing compliance programs, conducting audits, and providing guidance to internal teams.

To be successful in this role, you should have a solid understanding of security frameworks, standards, and regulations, such as NIST, ISO, SOC1 & 2.  You should also have excellent communication, problem-solving, and analytical skills, as well as the ability to work independently and as part of a team.

Responsibilities

• Develop and maintain cybersecurity compliance policies and procedures.
• Conduct and facilitate regular audits and assessments to ensure compliance with relevant laws, regulations, and standards (e.g., SOC1,SOC2, ISO 27001, NIST CSF 2.0).
• Collaborate with internal teams to identify and mitigate compliance risks.
• Provide training and guidance to employees on cybersecurity compliance best practices.
• Monitor and report on compliance status to senior management.
• Stay up-to-date with changes in cybersecurity laws and regulations.
• Coordinate with external auditors and regulatory bodies as needed.
• Respond to security incidents and breaches, ensuring appropriate documentation and reporting.
• Implementation and maintenance of security controls, policies, and procedures.
• Work with CloudOps, IT and Dev teams to ensure security & compliance measures are implemented and operating effectively.
• Help to formalize and document existing information security processes in Confluence.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent work experience.

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in cybersecurity compliance or a related role.
• In-depth knowledge of cybersecurity laws, regulations, and industry standards.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Relevant certifications (e.g., CISSP, CISM, CISA) are highly desirable.

• Excellent communication, problem-solving, and analytical skills.
• Ability to work independently and as part of a team.

PHYSICAL DEMANDS AND WORK ENVIRONMENT

The physical demands characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical Demands:  While performing the duties of this job, the employee is frequently required to stand; walk; sit; reach with hands and arms; and talk and hear.  Specific vision abilities required by this job include close vision, color vision, peripheral vision, depth perception, and ability to adjust focus.  Employee regularly uses hands to finger, handle, feel and manipulate controls, phone, computer equipment, and other tools.  The employee is occasionally required to climb or balance and stoop, kneel, crouch, or crawl.  The employee must occasionally lift and/or move up to 25 pounds.

The work environment characteristics described here are representative of those that must be encountered by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Work Environment:  This is a fast-paced, multi- tasking environment that may include frequent interruptions.  Duties are typically performed in an office environment while sitting at a desk or computer table.  The noise level in the work environment is usually moderate with limited exposure to weather conditions. 

The employee is subject to schedule changes and/or overtime as required by the job and his/her supervisor. This may include working weekends, working after the course of normal business hours and at other times as required by the job. The employee is subject to these schedule changes on as little notice as 24 hours.

PowerPlan is an EOE

Applicant Privacy Notice

Please note that this is a hybrid role that involves a combination of onsite work from our corporate office as well as work from home. While we strive to accommodate flexible working arrangements when sensible, there will be times when onsite work is required. This could include scheduled office days, team meetings, client meetings, or special events.