Compliance Manager, Lambda

• The ideal candidate will have demonstrated success in cloud computing compliance for SOC2 and ISO27001 certifications
• Have a bachelor's degree in information technology, computer science, or a related field
• Have 5+ years of direct and strong technical experience in a fast paced cloud/service provider environment focused on compliance, cloud/IT security, and risk management
• Possess familiarity with automation-centric compliance strategies, and specific experience of e.g. change control in agile, many-deploys-per-day environments
• Have knowledge and understanding of relevant legal and regulatory requirements such as SSAE 18, HIPAA, PCI-DSS, HITRUST, ISO 27001, CCPA, and GDPR
• Have certifications in one or more of the following CISA, CISM, CRISC, SSCP, or equivalent certifications
• Possess working knowledge of GRC tools such as IVIS, Allgress or similar
• Are able to build strong relationships and work individually and as part of a cross-functional team
• Are able to support the business unit as a subject matter expert
• Have a laser-like attention to detail and organization skills

Desirable

• The Compliance Manager is responsible for ensuring that the company's cloud computing environment is compliant with all applicable regulations and standards, and works with sales, support, and customers to communicate and ensure action is taken when needed
• As the Compliance Manager at Lambda, you will be responsible for developing, implementing, updating, and auditing compliance efforts while improving processes across the company. You will manage third-party auditors, and maintain certifications
• Develop and implement the company's cloud computing compliance program
• Draft policies and processes for SOC2 controls
• Write requirements for compliance automation and automated audit tooling
• Conduct regular audits of the cloud computing environment to ensure compliance
• Work with Product, Security, and Engineering to ensure that compliance plans dovetail with and enable other technical workstreams
• Work cross-functionally to assemble, track, and file regulatory applications
• Develop and implement remediation plans for non-compliant areas in collaboration with technical stakeholders
• Liaise with regulatory authorities to ensure compliance with applicable regulations
• Interface with customers, prospects, and partners by helping our sales and engineering teams address topics from RFPs or compliance questionnaires
• Provide training and education to staff on cloud computing compliance
• Anticipate, identify, and resolve potential issues that may affect company goals
• Stay up-to-date on industry best practices and standards