Risk & Controls Manager

What You'll Do

• Collaborate and drive cross-functional alignment with internal stakeholders to review, maintain, and align documentation, policies, and procedures with audit and regulatory expectations
• Conduct and document compliance impact assessments covering risk, privacy, and AI considerations to support organizational decision-making
• Provide strategic, risk-informed guidance in response to compliance-related inquiries from internal teams
• Support FloQast's security and compliance programs by ensuring adherence to applicable SOC and ISO standards
• Own execution of FloQast's established privacy program, including maintaining privacy documentation, supporting data subject requests, and ensuring ongoing compliance with applicable privacy laws
• Manage FloQast's sub-processor program, including maintaining notification workflows, coordinating updates to the sub-processor list, and responding to client inquiries related to sub-processor changes
• Support privacy-related product and vendor reviews, escalating regulatory considerations as needed
• Own third-party risk management processes and associated due diligence activities, including coordinating vendor reviews and supporting procurement needs
• Own policy management processes across the organization, including facilitating annual reviews, coordinating updates with policy owners, maintaining version history, and routing finalized policies for approval
• Support the identification, tracking, and remediation of compliance and policy-related issues, partnering with relevant stakeholders to drive resolution
• Identify opportunities for process improvement, including automation and AI, within the risk management and compliance function, and actively develop and implement AI-driven workflows to enhance program efficiency and scalability
• Any other tasks that may be assigned to help the company meet its goals

What You'll Bring

• Bachelor's degree
• 6+ years of experience in compliance, risk management, information security, privacy, or a related field, with SaaS industry experience preferred
• Strong general compliance expertise, including areas such as privacy, security, and IT general controls
• Experience applying and maintaining compliance with frameworks such as SOC and ISO standards
• Foundational knowledge of privacy regulations and frameworks such as GDPR, CCPA, and related international privacy laws
• Strong communication and interpersonal skills, with the ability to collaborate effectively across teams and functions
• Highly organized, detail-oriented, and proactive in identifying and addressing compliance risks
• Ability to operate autonomously and drive risk and compliance initiatives with limited oversight
• Flexible and adaptable in a high-growth, fast-paced environment

Nice to haves/Others

• Certifications such as CIA, CISA, CISSP, CISM, CIPP/E, CIPM, or similar
• Experience with cloud hosting environments such as AWS, Azure, or GCP
• Experience with emerging technologies, including AI-driven features and associated risk considerations
• Prior experience supporting international compliance initiatives or privacy regulatory readiness across multiple jurisdictions