GRC Manager

1 month, 2 weeks ago
Omilia

Omilia

Omilia is a global leader in Conversational AI, offering AI-based self-service solutions for enhanced customer care fulfillment and success.

IT Services
251-1K
Founded 2002
$20M raised

Description

  • Own the full lifecycle of ISO 27001, SOC 2 Type II, C5, PCI-DSS, and Cyber Essentials certifications, including scoping, evidence management, audit coordination, management responses, and remediation tracking.
  • Own GDPR operational compliance, including the DPIA process, LIA and TIA governance, RoPA maintenance, breach response documentation, and cross-border transfer mechanisms in collaboration with the DPO.
  • Maintain active compliance frameworks for DORA, NIS2, HIPAA, CCPA/CPRA, the EU Data Act, and the Cyber Resilience Act, including obligation tracking and client assurance artefacts.
  • Own breach and incident response governance end to end, including process management, regulatory notification decision support, Art. 33/34 documentation, and the notification register.
  • Drive control owner accountability by translating regulatory obligations into business impact, managing evidence deadlines, and escalating issues as needed.
  • Manage the ISMS evidence library and maintain the certification body relationship for ISO 27001 and C5.
  • Coordinate SOC 2 Type II readiness, including TSC scoping, evidence collection, auditor engagement, report distribution, and management response drafting.
  • Coordinate end-to-end client compliance audits, including evidence packs, management responses, and findings remediation.
  • Maintain and administer the GRC automation platform, including uploading evidence and monitoring control status.
  • Coordinate BAA execution and PHI obligation documentation with Legal for healthcare accounts.

Requirements

  • 4 to 8 years of experience in GRC, with most experience in regulated B2B technology or SaaS environments.
  • ISO 27001 Lead Auditor or Lead Implementer certification is mandatory.
  • Demonstrated end-to-end ownership of SOC 2 Type II, including scoping, evidence coordination, auditor management, and management responses.
  • Strong GDPR practitioner knowledge, including DPIAs, RoPA, data subject rights, and cross-border transfer mechanisms such as SCCs and BCRs.
  • Working knowledge of DORA and NIS2 as live compliance obligations.
  • Familiarity with HIPAA BAA coordination and US state privacy law tracking, including CCPA/CPRA, is a strong advantage.
  • Experience using a GRC automation platform at an operational level.
  • Ability to work independently, manage a personal compliance tracker, and close loops without follow-up.
  • Ability to translate regulatory obligations into plain language and drive responses from technical and product stakeholders without formal authority.
  • Degree in Law, Business, Information Systems, or equivalent professional experience.
  • Business fluency in English, written and spoken, is mandatory.
  • Occasional travel to Greece for client audits or certification body engagements may arise.

Benefits

  • Fixed compensation.
  • Long-term employment with vacation days.
  • Professional development support, including courses and training.
  • Opportunity to work on cutting-edge technology products with global impact.
  • Supportive, skilled, and enjoyable team environment.
  • Apple gear.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Manager, SAR Filing — BSA/AML & Sanctions Operations

Pathward 251-1K Diversified Financial Services

Pathward is seeking a Manager, SAR Filing to oversee its SAR and CTR filing operations within the BSA/AML and Sanctions Operations team, ensuring accurate, timely, and defensible regulatory filings.

16 hours, 24 minutes ago

Vice President, BSA/AML Operations – Cases

Pathward 251-1K Diversified Financial Services

Pathward seeks a Vice President, BSA/AML Operations – Cases to lead its Suspicious Activity Monitoring case investigation function and strengthen a compliant, risk-based financial crime program within a regulated financial institution.

16 hours, 24 minutes ago

Manager, Sanctions Operations — BSA/AML & Sanctions Operations

Pathward 251-1K Diversified Financial Services

Pathward is seeking a Manager, Sanctions Operations to lead OFAC, 314(a), and PEP screening operations, ensuring accurate dispositions, balanced workloads, and sustainable service levels.

16 hours, 24 minutes ago

Manager, BSA/AML Operations – Alerts (Alert Operations)

Pathward 251-1K Diversified Financial Services

Pathward is seeking a Manager, Alert Operations to lead its Suspicious Activity Monitoring alert-review function within the BSA/AML and Sanctions Operations team, ensuring compliant, risk-based, and sustainable financial-crime monitoring.

16 hours, 54 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers