Compliance Officer

About:

Civo is revolutionizing the cloud industry by providing developers and businesses with cutting-edge, developer-friendly cloud solutions. With a focus on simplicity, performance, and reliability, Civo enables its clients to unleash the full potential of their projects and scale with ease. As a company committed to excellence and innovation, Civo values diversity, collaboration, and continuous improvement.

About the Role:

The Compliance Specialist will play a pivotal role in helping our company achieve and maintain various compliance certifications, including SOC2, ISO 9001, Cyber Essentials, HIPAA, PCI DSS, and ISO 27001. This role involves developing, implementing, and overseeing compliance processes and ensuring that all operations and processes meet the necessary regulatory and certification requirements.

Responsibilities:

• Lead and manage the company's efforts to achieve SOC2, ISO 9001, Cyber Essentials, HIPAA, GDPR, and PCI DSS compliance.

• Maintain and ensure ongoing compliance with ISO 27001 standards.

• Develop, implement, and update compliance policies and procedures.

• Conduct internal audits to identify potential compliance issues and areas for improvement.

• Prepare and manage external audits and certification processes.

• Collaborate with various departments to ensure compliance requirements are understood and implemented.

• Conduct and support external due diligence activity - vendors/partners

• Provide training and support to staff on compliance-related topics.

• Stay up-to-date with regulatory changes and industry standards.

• Prepare and submit compliance reports to management and regulatory bodies as required.

• Provide input to tenders and due diligence questions as required by the business

• Act as the main point of contact for all compliance-related inquiries and issues.

Key Results/Objectives:

• Achieve and maintain SOC2, ISO 9001, Cyber Essentials, HIPAA, GDPR and PCI DSS certifications.

• Ensure ongoing compliance with ISO 27001 standards.

• Develop and implement comprehensive compliance policies and procedures.

• Successfully manage and facilitate internal and external audits.

• Ensure Civo can demonstrate a compliant supply chain to its customers and partners

• Foster a culture of compliance and continuous improvement across the organization.

Requirements:

• At least 3 years of experience in a compliance role, preferably in the cloud computing industry.

• In-depth knowledge of SOC2, ISO 9001, Cyber Essentials, GDPR and ISO 27001.

• Strong understanding of regulatory requirements and industry standards.

• Experience and understanding of risk management

• Excellent analytical, organizational, and communication skills.

• Ability to manage multiple projects and deadlines.

• Strong attention to detail and problem-solving skills.

Nice to Have (Optional):

• Relevant certifications (e.g., CISA, CISM, CISSP).

• Experience in a fast-growing tech company.

• Knowledge of other compliance frameworks and standards such as HIPAA, PCI DSS, ISO20017 and ISO20018.

• Understanding of data protection regulation (UK, US, India and beyond)

• Understanding of staff vetting processes

Why Join?

• Competitive compensation and benefits package.

• 4-day week company (unless attending an event).

• Uncapped holiday.

• Remote work environment with flexibility and autonomy.

• Collaborative and inclusive culture that values diversity and creativity.

• Opportunity to work with a dynamic and innovative team in the fast-growing cloud industry.

• A hybrid remote position, requiring occasional travel to London.