Compliance Consultant (Contract)

  • Part-time

Company Description

We are seeking a consultant to assist Sigma Software in providing the highest level of information security and compliance expertise to our clients.  

We require expertise in one or more of the following areas:   

  • Information Security Management  

  • Privacy and Personal Data Protection  

  • Business Continuity Management 

  • AI Compliance 

Job Description

  • Leading and overseeing compliance projects following relevant regulations and standards 

  • Implementing, developing, and supporting management systems such as ISMS, BCMS, and QMS 

  • Exploring, implementing, and supporting privacy requirements to ensure alignment with data protection regulations 

  • Developing and implementing comprehensive policies and procedures that align with regulatory requirements, and monitoring and assessing compliance managers' documented policies 

  • Leading and conducting thorough audits to identify areas of risk, non-compliance, and opportunities for improvement 

  • Providing recommendations for corrective actions 

  • Collaborating with relevant stakeholders to perform risk management 

  • Developing, updating, and implementing advanced compliance training programs for employees across all levels, while managing compliance managers' support for the awareness program 

  • Investigating, resolving, and providing guidance for compliance managers on complex requests and complaints, ensuring appropriate corrective actions are taken 

  • Investigating and implementing automation of compliance processes 

Qualifications

  • In-depth knowledge of one or more of the relevant standards such as ISO 27001, SOC2, OWASP SAMM, ISO 27701, ISO 22301, ISO 9001, ISO 42001 

  • 5-7 years of experience in compliance management, focusing on Information Security, Privacy, and BCP (Business Continuity Planning) 

  • Experience in obtaining external certifications 

  • Excellent communication skills with the ability to explain compliance requirements in clear and understandable language to all stakeholders 

  • Advanced analytical skills 

  • Experience with GRC/Compliance Software