Full Job Description
The Senior Compliance Specialist supports the overarching Digital Technology Risk & Compliance program. The role is responsible for planning, governing, and reporting on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001, so that obligations are understood, owned, and met consistently across jurisdictions and business units.
The position partners cross-functionally with business, IT, Legal, Security, Internal Audit, Finance, and operations teams to maintain the compliance obligations inventory, coordinate audits and certifications, track remediation, and provide leadership with clear visibility into Qnity's compliance posture.
KEY RESPONSIBILITIES
Compliance Program Management
• Support the day-to-day management DT compliance program, including program scope, operating model, and the annual compliance plan.
• Plan and manage the compliance calendar, covering assessments, certifications, and control testing cycles.
• Define and track program performance indicators and prepare compliance status reporting and dashboards for leadership and governance forums.
• Facilitate compliance governance meetings and management reviews, tracking decisions and action items to closure.
• Drive compliance awareness and training for control owners and stakeholders.
Framework and Regulatory Compliance Oversight
• Coordinate SOX 404 IT compliance activities for IT General Controls (ITGCs), IT Application Controls (ITACs), and automated controls, including control testing, evidence collection, deficiency tracking, and remediation, in partnership with Internal Audit, External Audit, Finance, and IT.
• Plan, govern, and report on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001
• Use the Unified Controls Framework to map and rationalize controls across frameworks, reducing duplicate testing and evidence requests.
Stakeholder Management and Continuous Improvement
• Partner with business, IT, Legal, Security, HR, facilities, engineering, and operations teams to embed compliance requirements into day-to-day processes.
• Monitor corrective actions and remediation plans, and escalate overdue or high-risk items to leadership.
• Identify opportunities to streamline compliance processes through GRC tools and automation.
• Provide guidance to control owners and compliance team members on compliance requirements and leading practices.
EDUCATION AND EXPERIENCE
• Bachelor's degree required. Preferably in Information Security, Risk Management, or a related field.
• 8+ years of experience in compliance, risk management, audit, governance, or information security, including managing compliance programs preferred.
• Experience with one or more frameworks, including SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer preferred.
• Experience with GRC tools (e.g., Optro, OneTrust, ServiceNow) preferred.
KEY SKILLS/ COMPETENCIES
• Communicating with Impact - Expressing thoughts, feelings, and ideas in a clear, succinct, and compelling manner in both individual and group situations.
• Analysis and Judgment - Identifying and understanding issues, problems, and opportunities; using effective approaches for choosing a course of action or developing appropriate solutions
• Planning and Organizing - Establishing clear courses of action, timelines, and priorities to ensure compliance commitments are delivered on time.
• Collaboration and Influence - Working effectively across functions and influencing stakeholders to achieve compliance outcomes without direct authority.
• Continuous Learning - Maintaining current knowledge of evolving regulatory and cybersecurity requirements and applying it to the program.
KEY SKILLS FUNCTIONAL COMPETENCIES
• Compliance Program Management - Plans, governs, and reports on a multi-framework compliance program, translating obligations into owned controls, timelines, and measurable outcomes.
• Regulatory and Framework Knowledge - Applies working knowledge of SOX, TISAX, CMMC/NIST SP 800-171, NIS2, and ISO 27001 to assess compliance and drive remediation.
• Audit and Certification Management - Coordinates audits, assessments, and certifications end to end, from planning and evidence collection through findings remediation.
#LI-LH1
Join our Talent Community to stay connected with us!
Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page.
We use Artificial Intelligence (AI) to enhance our recruitment process.
