Corporate Compliance Lead

Overview We are designing the grid of the future!  The Technology Risk & Compliance Lead is responsible for developing, implementing, and maintaining the organization’s technology risk and compliance program across all business units. This includes oversight of IT and security compliance, technology risk management, audit readiness, control governance, vendor risk management, and various compliance frameworks such as SOC 2, ISO 27001, and other relevant standards. The role requires collaboration across departments to ensure adherence to laws, regulations, and industry standards, while also fostering a strong culture of compliance and risk management. Responsibilities How you can make an impact: Compliance Program Management Develop, implement, and manage various company-wide compliance programs. Monitor compliance with applicable laws, regulations, and industry standards. Partner with business, IT, Security, Legal, HR, Software, and Finance teams to develop, document, implement, and maintain compliance policies, procedures, controls, and supporting workflows. Conduct internal compliance audits, control testing, and evidence reviews; track findings through remediation and closure partnering with our business. Evaluate, implement, and manage compliance, risk, or audit management software, including related workflows, reporting, and evidence repositories. Maintain the organization’s technology control framework, control library, policy inventory, evidence repository, and compliance calendar. Map compliance obligations, customer commitments, audit requirements, vendor obligations, and internal controls to reduce duplication and improve consistency across compliance activities. Manage technology risk and compliance projects from initiation through closure, including scope definition, planning, scheduling, stakeholder coordination, execution tracking, risk and issue management, and status reporting. Develop and maintain project plans, milestones, dependencies, action items, decision logs, and executive-level project updates for audits, certifications, remediation initiatives, vendor risk activities, customer assurance efforts, and compliance improvement projects. Coordinate cross-functional workstreams involving IT, Security, Legal, HR, Finance, and software teams to ensure deliverables are completed on time and aligned with compliance and risk objectives. Track project risks, blockers, resource constraints, and dependency conflicts; escalate issues appropriately and drive resolution with accountable owners. Facilitate working sessions, readiness reviews, remediation meetings, audit preparation meetings, vendor review meetings, and stakeholder updates. Apply structured project management practices to improve predictability, accountability, documentation quality, and timely completion of compliance and risk initiatives. Support the implementation and ongoing improvement of GRC, audit management, vendor risk, and compliance automation tools, including requirements gathering, workflow design, user acceptance testing, rollout planning, adoption tracking, and post-implementation optimization. Prepare clear, concise project reporting for leadership, including progress against milestones, overdue items, risk trends, key decisions, and required executive action. IT & Security Compliance Support and help drive efforts to achieve and maintain certifications such as SOC 2, ISO 27001, and other relevant frameworks, in partnership with IT, Security, Legal, HR, Software, and business stakeholders. Partner with IT and Security teams to ensure compliance requirements are built into technology processes. Coordinate audit evidence collection across departments, ensuring documentation is complete, accurate, timely, and audit-ready. Manage risk assessments, gap analyses, and remediation plans for IT compliance. Coordinate external audits and act as primary liaison with auditors and certification bodies. Work with control owners to define control intent, evidence expectations, testing procedures, and remediation requirements. Support internal and external audits by coordinating requests, preparing evidence, tracking auditor inquiries, and maintaining audit status reporting. Document control gaps, audit findings, and process deficiencies; assign accountable owners and track corrective actions through closure. Risk & Governance Conduct enterprise technology and compliance risk assessments, and track treatment plans through closure. Collaborate with executive leadership to ensure compliance risk is included in corporate strategy. Monitor regulatory changes, industry trends, and compliance best practices; recommend updates to policies, controls, training, and governance processes as appropriate. Maintain regulatory and compliance risk register. Maintain mappings between control frameworks, audit requirements, and internal controls. Provide compliance reporting and metrics to senior management and the Board of Directors. Third Party Risk Management Partner with Procurement, Legal, Security, IT, and business owners on third-party risk management and vendor compliance reviews. Support vendor risk assessments, due diligence reviews, security questionnaires, evidence reviews, and contract-related compliance obligations. Document vendor risks, control gaps, compensating controls, risk decisions, and required follow-up actions. Track vendor remediation commitments, reassessments, and ongoing monitoring activities based on vendor criticality and risk. Support customer security and compliance inquiries, including questionnaires, evidence requests, and contract-related control commitments. Track customer security and compliance commitments to ensure they are reviewed, approved, mapped to internal controls, and monitored for ongoing compliance. Governance Training & Awareness Support governance processes for technology policies, sta