Internal Compliance Executive

A. Overall Purpose of the Job

(Brief description of the primary purpose of this position)

Executes internal compliance program as per the overall strategic information security plan of Aspire Lifestyles in accordance with customer requirements, certifications requirements, and cyber security requirements. A key element of this role is to work with internal stakeholders in business lines and support function.

B. Key Responsibilities

(Critical responsibilities and skills of this position, listed in order of importance)

• Serve as 2nd line of defense (2LOD), performing continuous assessment of IT security practices and policies to improve the security posture of the company
• Conduct regular risk assessments to identify potential vulnerabilities in systems and processes and develop / implement strategies to mitigate identified risks.
• Produce regular reporting on compliance evidence status.
• Identify compliance gaps and plan the implementation of new controls.
• Work closely with application and infrastructure architects and ensure the applications and infrastructure is designed and transitioned to operations based on various business and technology needs.
• Work closely with information technology team to ensure that infrastructure is designed and built with required security controls. Advise on infrastructure security best practices such as server hardening, patch management, secure operating environment.
• Educate employees by planning the webinars, emailers and group talks on audits and certifications to promote the culture of information security and compliance.
• Plan, present and follow-up on compliance programs in all security forums such as security steering committee, data protection committee, information security management committee.
• Collect and maintain applicable IT Security Regulations for all relevant geographies.
• Provide expert opinion on information security policies to ensure that these are updated based upon the new security trends, customer needs, incident trend and legal or regulatory requirement.
• Demonstrate expertise in managing third party security assessment across the organization.
• Support the Manager of Audits, Certifications and Attestations in executing internal compliance program.

C. Job Profile

Required Competencies & Work Experience

(Critical behaviors necessary to successfully perform the job)

Required Languages (Brief description of the language skills needed to perform the job)