Compliance & SOC Manager

Company Profile:

GoldenSource International is a fast growing FinTech firm and a leader in data management software solutions for the financial services sector. Headquartered in New York, GoldenSource also has key offices in London, Milan and Mumbai, with more than 400 staff worldwide.

Having been acquired in 2022 by private equity firm Gemspring, GoldenSource is in an exciting phase of investment and rapid growth. GoldenSource offers an international working environment, a positive corporate culture, the opportunity of professional development and attractive employee benefits.

Industry Recognition: GoldenSource consistently receives industry recognition and awards for a wider range of capabilities than any other firm in our space. The awards include Best Data Management Platform and Best Cloud-Based Data Management Solution.

Job description:

The Compliance Manager in the SDAG (Security & Data Administration Group) team will play a crucial role in maintaining the confidentiality and integrity of our corporate and customer data within the organization.  As a senior consultant audit oversight, information consolidation, validation and reporting will be key aspects of this role.  Specializing in Data Privacy you will be able to foster a culture of data protection within the organization, being pro-active in promoting new ideas and assisting the existing team in this area.

Key Responsibilities:

Audit: Conduct internal audits as required across different departments and compliance areas.  Assist and support the external audit function pertaining to both ISO and SOC compliance, including coordinating SOC1 and SOC2 reporting and liaising directly with our US-based external audit firm.

Data Privacy Framework: Assist in developing and implementing data privacy framework including data protection policies, procedures in business processes, ensuring they align with legal standards and organizational objectives.

Data Privacy Alignment: Stay abreast of legislative and regulatory developments for upcoming compliances (such as DORA, enhancements to GDPR etc) and also technological advancements and their implications on data privacy.  Advise and assist in the building of strategies for company alignment with requisite agreed regulatory timelines.

Cross-Functional Collaboration: Work collaboratively with the various internal departments to integrate data protection measures/compliances into business processes. 

Documentation and Record Keeping: Manage and maintain policy documents, comprehensive records of audit activities, steering committee decisions and action items and corrective actions etc.
Planning: Work with the team to establish both short-term and long term plans to assist in the overall internal governance of Data Privacy and other activities worked on.

Training and Awareness: Support the training department in conducting Information Security and data protection training sessions to enhance awareness and understanding of data privacy responsibilities among employees. Recommend complimentary training from existing training repositories that may help assist in the up-skilling of GoldenSource personnel.

Qualifications Skills required:

This is a small dynamic department, we will need the applicant to adopt the Culture of Continuous Improvement and to adapt to the ever changing regulatory frameworks required by our business, to fulfill this role the applicant will require: 

• Have a working knowledge of ISO27701, ISO27018 or similar data privacy framework.
• Have worked as an auditor or within a function having direct experience of audit requirements and process (i.e.as an auditee), being able to clearly articulate the workflow and expectations.
• Demonstrable working experience of SOC2 reporting, including direct experience of working with a US-based audit firm on SOC2 examinations (Type I and/or Type II).
• Ability to prepare reports of analysis, internal audits and results to provide briefings to management.
• Excellent documentation skills (proof reading, preparing templates, updating and understanding technical, legal and legislative documents), experience of maintaining ISO Documentation or similar for an organization is a plus.
• Application skills to include MS Excel, Jira (or equivalent), MS PowerPoint, MS Word (or equivalent).
• Knowledge of any of the following ISO27001 ISMS, ISO22301 BCMS, SOC1& SOC2 would be beneficial.
• Excellent and assertive communication (Written & Spoken), interpersonal, and leadership skills.
• Self motivated and able to work within a team or alone as required from time to time to manage this function with the ability to work to deadlines and following up on audit findings to ensure timely closure.
• Ability to host meetings across departments to drive forward initiatives, increase standardization, consolidate documentation and assist in the build and maintenance of Best Practices.
• Identify use cases for process automation within the department and process improvement.
• 10 years of industry experience within software IT, audit or financial services.
• Minimum 4 years of experience working in compliance having project management experience as part of a function.
• Ability to conduct and manage BCP tests and fire drills is beneficial.