Senior Director, Global Risk and Compliance

This is a fully remote position, open to applicants in Maryland.

📋 Description

• Establish and spearhead Blend360's inaugural centralized risk management and compliance function.

• Define risk appetite and tolerance thresholds in collaboration with executive leadership.

• Develop and sustain the enterprise risk management framework and master risk register.

• Conduct annual risk assessments across various regions and business units.

• Create incident response protocols and lead reviews following incidents.

• Provide quarterly updates to senior leadership regarding risk position, threats, and mitigation efforts.

• Formulate policies on AI usage, data management, information security, and business continuity.

• Implement AI governance standards that encompass data quality, model performance, bias detection, and responsible utilization.

• Evaluate technology infrastructure risks related to AWS, Snowflake, and client systems.

• Monitor data safety throughout the processes of collection, processing, sharing, and cross-border movement.

• Assess client projects for cloud, data, and AI risks, offering pertinent recommendations.

• Set standards for vendor and third-party risk evaluations.

• Oversee global insurance programs and manage broker relationships.

• Lead SOC 2 compliance efforts, including audit relationships, frameworks, and tracking remediation.

• Supervise ESG compliance and sustainability reporting.

• Stay informed on regulatory changes across North America, Europe, and Latin America.

• Coordinate compliance efforts across North America, Latin America, and EMEA.

• Conduct quarterly regional compliance assessments and report findings to the SVP Finance.

• Represent Blend360 in discussions with enterprise clients regarding risk and compliance issues.

• Manage client compliance questionnaires and reviews of high-risk contracts.

• Develop client contract review checklists and maintain a record of contracts that exceed risk thresholds.

⛳️ Requirements

• 8+ years of experience in risk management, compliance, or legal operations within professional services, technology, AI/data, or consulting sectors.

• 5+ years in a global or multi-regional capacity overseeing policies and compliance programs.

• Extensive knowledge of GDPR, CCPA/CPRA, LGPD, EU AI Act, NIST AI RMF, COSO, and ISO 31000.

• Proficient understanding of cloud architecture, AWS, Snowflake, Databricks, and AI/ML-related risks.

• Experience in managing corporate insurance and collaborating with brokers.

• Proven track record of engaging with Fortune 500 clients on security, compliance, and risk issues.

• Exceptional written and verbal communication abilities.

• Skilled in presenting to executives, boards, and clients.

• Capability to influence across regions and functions in a dynamic, matrixed organization.

• A bachelor's degree is required.

• Proficiency in Spanish is preferred.

• Familiarity with regulations in Latin America, specifically in Colombia and Uruguay.

• Experience in establishing a compliance function from the ground up within a growth-stage company.

• Preferred certifications include CRISC, CISM, CISA, CIPP/E, or ARM.

• Experience with SOC 2 audits and ESG/sustainability reporting is preferred.

• Knowledge of NIST CSF and ISO 27001 is preferred.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• 401K

• PTO

• Paid holidays

• Commuter benefits

• Spending accounts

• Life insurance

• Disability coverage

• EAPs