Commercial Compliance Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, execute, and uphold the enterprise sales compliance program, which encompasses policies, standard operating procedures, and monitoring systems.

• Collaborate with Enterprise Account Executives and the Deal Desk from the qualification of opportunities through to the closure of deals.

• Evaluate customer security questionnaires (CAIQ, SIG), RFPs, and RFQs for compliance obligations, BAA terms, and contractual risks.

• Ensure adherence to HIPAA/HITECH, DORA, and ICT third-party risk management frameworks.

• Work alongside Engineering and Security to synchronize the product roadmap with enterprise certifications and regulatory standards.

• Oversee the organization-wide vendor risk management program, which includes ICT sub-outsourcing rights, subprocessor security evaluations, continuous compliance monitoring, and audit rights.

• Monitor global AI governance directives and data privacy regulations, translating policies into actionable guidance.

• Streamline daily compliance tasks by creating compliance agents and workflows.

⛳️ Requirements

• Over 6 years of practical experience in regulatory compliance, third-party risk management (TPRM), or commercial sales operations within an enterprise SaaS, cloud platform, or rapidly growing B2B technology organization.

• Comprehensive understanding of HIPAA/HITECH, EU DORA, ICT supply chain governance, and commercial contracting practices, which includes DPAs, BAAs, and specialized regulatory schedules.

• Demonstrated success in operationalizing compliance frameworks for cloud software.

• Knowledge of SOC 2, ISO 27001 readiness, and contemporary compliance automation tools.

• Enthusiastic about establishing a compliance program from the ground up and adept at navigating high-velocity, uncertain environments.

• Exceptional skill in distilling intricate regulatory requirements into clear guidance for sales executives, software engineers, corporate counsel, and enterprise CISOs or compliance officers.

• Professional certifications such as CIPP/US, CIPP/E, CRISC, CISA, or HCISPP are highly preferred.

🏝️ Benefits

• Regular travel to Factory offices.

• Opportunity to create a commercial compliance program from scratch.

• Individual contributor role within the Legal team.