RemoteLeaf Logo
Log in Sign up

GRC Manager

4 weeks, 2 days ago
North Macedonia, Spain, Albania, Bulgaria, Portugal, Greece
Full-time
Senior
Compliance Manager
Cybersecurity
HIPAA
Apply Now
Omilia

Omilia

Omilia is a global leader in Conversational AI, offering AI-based self-service solutions for enhanced customer care fulfillment and success.

IT Services
251-1K
Founded 2002
$20M raised
View All Jobs 32

Description

  • Own the full lifecycle of ISO 27001, SOC 2 Type II, C5, PCI-DSS, and Cyber Essentials certifications, including scoping, evidence management, audit coordination, management responses, and remediation tracking.
  • Own GDPR operational compliance, including the DPIA process, LIA and TIA governance, RoPA maintenance, breach response documentation, and cross-border transfer mechanisms in collaboration with the DPO.
  • Maintain active compliance frameworks for DORA, NIS2, HIPAA, CCPA/CPRA, the EU Data Act, and the Cyber Resilience Act, including obligation tracking and client assurance artefacts.
  • Own breach and incident response governance end to end, including process management, regulatory notification decision support, Art. 33/34 documentation, and the notification register.
  • Drive control owner accountability by translating regulatory obligations into business impact, managing evidence deadlines, and escalating issues as needed.
  • Manage the ISMS evidence library and maintain the certification body relationship for ISO 27001 and C5.
  • Coordinate SOC 2 Type II readiness, including TSC scoping, evidence collection, auditor engagement, report distribution, and management response drafting.
  • Coordinate end-to-end client compliance audits, including evidence packs, management responses, and findings remediation.
  • Maintain and administer the GRC automation platform, including uploading evidence and monitoring control status.
  • Coordinate BAA execution and PHI obligation documentation with Legal for healthcare accounts.

Requirements

  • 4 to 8 years of experience in GRC, with most experience in regulated B2B technology or SaaS environments.
  • ISO 27001 Lead Auditor or Lead Implementer certification is mandatory.
  • Demonstrated end-to-end ownership of SOC 2 Type II, including scoping, evidence coordination, auditor management, and management responses.
  • Strong GDPR practitioner knowledge, including DPIAs, RoPA, data subject rights, and cross-border transfer mechanisms such as SCCs and BCRs.
  • Working knowledge of DORA and NIS2 as live compliance obligations.
  • Familiarity with HIPAA BAA coordination and US state privacy law tracking, including CCPA/CPRA, is a strong advantage.
  • Experience using a GRC automation platform at an operational level.
  • Ability to work independently, manage a personal compliance tracker, and close loops without follow-up.
  • Ability to translate regulatory obligations into plain language and drive responses from technical and product stakeholders without formal authority.
  • Degree in Law, Business, Information Systems, or equivalent professional experience.
  • Business fluency in English, written and spoken, is mandatory.
  • Occasional travel to Greece for client audits or certification body engagements may arise.

Benefits

  • Fixed compensation.
  • Long-term employment with vacation days.
  • Professional development support, including courses and training.
  • Opportunity to work on cutting-edge technology products with global impact.
  • Supportive, skilled, and enjoyable team environment.
  • Apple gear.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Lightbridge

Environmental Licensing Engineer

Lightbridge 11-50 Industrial Conglomerates

Lightbridge is seeking an Environmental Licensing Engineer to support regulatory compliance and environmental licensing for next-generation nuclear fuel development and fuel cycle facility siting.

Anywhere Full-time Senior Compliance Manager
16 hours, 1 minute ago
ZERO TO THREE

Policy Analyst

ZERO TO THREE 251-1K Diversified Consumer Services

ZERO TO THREE is hiring a Policy Analyst to advance its federal policy agenda on child care, family tax policy, and related issues in support of infants, toddlers, and families.

United States Full-time Junior Compliance Manager Program Manager
$65k-$75k
16 hours, 31 minutes ago
DistroKid

Infringement Manager

DistroKid 251-1K Media

DistroKid is hiring an Infringement Manager to lead its infringement operations team handling copyright, trademark, and impersonation claims across the platform.

United States Full-time Lead Compliance Manager Operations Manager
$100k-$120k
Confluence
2 days, 15 hours ago
GoFundMe

Principal, Policy Development

GoFundMe 251-1K Capital Markets

GoFundMe is hiring a Principal, Policy Development to shape Trust & Safety policies that govern fraud, identity, content, and platform conduct across a large social fundraising platform.

United States Full-time Lead Compliance Manager
$133k-$199k
Machine Learning
2 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers