Compliance Officer - EdTech Company

A pioneering EdTech company is looking for an experienced Compliance Officer to ensure adherence of its cutting-edge learning system to relevant laws, regulations, and ethical standards, perform risk assessments, develop compliance policies, conduct audits, and investigate non-compliance issues.

The Compliance Officer’s role involves staying current on educational, data privacy, and technology laws, collaborating with departments on compliance matters, managing records and documentation, and implementing corrective measures to mitigate risk and uphold integrity.

Key Responsibilities:

· Lead the implementation of all regulatory, legal, ethical, and standards-based compliance protocols, including:

o Bahrain PDPL (Law No. 30 of 2018)

o GDPR, COPPA, FERPA

o IRB

o ISO/IEC 27001, 27701, 29134, 29190, 25010, 12207

o ISO 21001 (educational institutions)

· Prepare and maintain a live Compliance Matrix

· Conduct DPIAs and risk assessments to identify and evaluate compliance vulnerabilities and gaps within the organization's systems and processes

· Develop, implement, and maintain robust compliance policies and procedures to ensure adherence to legal and ethical standards.

· Oversee child data protection measures and ethical safeguards for biometric/AI use

· Work closely with various departments to integrate compliance requirements into business operations and address compliance-related concerns.

· Support the legal, R&D, and system commercialization teams with regulatory and audit requirements.

· Maintain accurate records, prepare reports for internal management and regulatory bodies, and manage all required documentation and filings.

Job Requirements:

· Degree qualified with 5+ years of practical experience in compliance, IT audits, or as a security analyst.

· Experience in identifying, assessing, and mitigating risks related to non-compliance is a core component of the role

· Certifications such as CISA, CIPP, etc. are a plus.

· The ability to analyze data, interpret complex information, and critically evaluate risks and solutions is essential for identifying compliance gaps.

· A deep understanding of data security, cybersecurity risks, and the technical aspects of ed tech platforms is crucial.

· Strong organizational skills and a meticulous attention to detail to effectively monitor regulations, conduct audits, and manage compliance activities.

· Thorough understanding of education-specific regulations, such as FERPA (Family Educational Rights and Privacy Act) and COPPA (Children's Online Privacy Protection Act), and evolving legal frameworks is vital.

Job Type: Full-time