Job description
This is a remote position.
Lead Rayda's compliance and risk management framework across internal operations and third party vendors.
Build and manage the vendor risk management programme, including risk classification, due diligence, KYB and periodic reviews.
Maintain Rayda's compliance register, risk register and compliance calendar, ensuring obligations and controls have clear owners.
Monitor key controls, compliance gaps and remediation actions and escalate material risks appropriately.
Support information security and privacy compliance, including SOC 2, ISO 27001, GDPR and customer security requirements.
Identify and manage operational risks across Rayda's device, logistics, vendor, payment and data operations.
Support customer compliance requests, security questionnaires, audits and evidence requirements.
Work with Procurement, Operations, Finance, IT, Engineering, HR and external legal counsel to implement appropriate controls and compliance requirements.
Provide leadership with regular reporting on compliance status, material risks, control effectiveness and remediation.
Continuously improve and automate Rayda's compliance and risk processes as the organisation scales.
Requirements
4+ years of experience in compliance, risk, internal audit, GRC, vendor risk, information security governance or a related field.
Proven experience designing or operating compliance and risk management processes.
Experience with third party/vendor due diligence and risk assessment.
Strong understanding of operational risk, controls, risk registers and remediation.
Experience working with compliance policies, procedures and control frameworks.
Strong understanding of legal, regulatory, compliance and commercial risk and the ability to distinguish between them.
Experience working cross functionally with Operations, Finance, IT, Engineering, HR and leadership.
Strong judgement, attention to detail and organisational skills.
Ability to work independently in a fast growing environment where processes are still being developed.
Experience in technology, SaaS, procurement or international operations is an advantage.
Benefits
Why Join Rayda?This is an opportunity to build the compliance and risk function of a global technology company while it is still early enough for your work to materially shape how the organisation operates..
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.