compliance manager

Airwallex

<div><h2 class="jobSectionHeader"><b>About Airwallex</b></h2><p>
Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 250,000 businesses worldwide &ndash; including Brex, Rippling, Navan, Qantas, SHEIN and many more &ndash; with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale.</p><p>
Proudly founded in Melbourne, we have a team of over 2,300 of the brightest and most innovative people in tech across 27 offices around the globe. Valued at US$11 billion and backed by world-leading investors including T. Rowe Price, Visa, Mastercard, Robinhood Ventures, Sequoia, Salesforce Ventures, DST Global, and Lone Pine Capital, Airwallex is leading the charge in building the global payments and financial platform of the future. If you&rsquo;re ready to do the most ambitious work of your career, join us.</p><div><br>
</div><h2 class="jobSectionHeader"><b>
Attributes We Value</b></h2><p>
We hire successful builders with founder-like energy who want real impact, accelerated learning, and true ownership. You bring strong role-related expertise and sharp thinking, and you&rsquo;re motivated by our mission and operating principles. You move fast with good judgment, dig deep with curiosity, and make decisions from first principles, balancing speed and rigor.</p><p>
You're humble and collaborative; turn zero‑to‑one ideas into real products, and you &ldquo;get stuff done&rdquo; end-to-end. You use AI to work smarter and solve problems faster. Here, you&rsquo;ll tackle complex, high‑visibility problems with exceptional teammates and grow your career as we build the future of global banking. If that sounds like you, let&rsquo;s build what&rsquo;s next.</p><div></div><p><b><br>
What you'll do</b></p><p>
As Airwallex expands its product suite in the Middle East and North Africa (MENA) region, this role is a critical addition to our global compliance team. We have established our licensed entity in the UAE, operating under a financial services regulator (CBUAE), to offer our full suite of payment and financial products to businesses across the MENA region.</p><p>
This role will serve a dual function: you will be the designated <b>Compliance Manager &amp; Money Laundering Reporting Officer (MLRO) for Airwallex's UAE-licensed entity.</b></p><p></p><p>
Reporting to the Regional Director of Financial Crime Compliance for EMEA, you will be responsible for driving and embedding Airwallex's compliance programs for both our licensed entities in the UAE. This role partners with internal teams to design, develop, implement and monitor compliance rules and supports our regulatory obligations in the UAE and across the MENA region. This role is based in Dubai.</p><p></p><p><b>
Responsibilities:</b></p><ul><li><p>
Own and develop the compliance framework for Airwallex's UAE entities (DFSA/FSRA and CBUAE regulated licenses), building on the Airwallex global compliance framework.</p></li><li><p>
Serve as the primary compliance contact for Airwallex's UAE-licensed entity with regulators, including the <b>Dubai Financial Services Authority (DFSA)</b> and the <b>Central Bank of the UAE (CBUAE)</b>, and other critical external stakeholders.</p></li><li><p>
Provide day-to-day management and execution of Airwallex's AML interactions, examinations, and ad-hoc requests.</p></li><li><p>
Manage day-to-day BAU tasks including enhanced due diligence (EDD) approvals, name screening alert escalations, and filing Suspicious Transaction Reports as necessary.</p></li><li><p>
Develop, implement, and maintain an effective and updated anti-money laundering and compliance program covering investor protection, market abuse, and conflicts of interest.</p></li><li><p>
Provide expert advice to the Commercial and Operations teams on compliance matters related to both payments and investment products.</p></li><li><p>
Work closely with the Financial Partnership team to handle enquiries from external parties including banking and scheme partners.</p></li><li><p>
Develop and manage a regular monitoring and reporting process to inform senior management, the audit committee and the board as necessary.</p></li><li><p>
Design and execute reports to measure the success and performance of Compliance initiatives, operations, and Key Risk Indicators.</p></li><li><p>
Drive the design and monitoring of internal controls to support Compliance policies and procedures.</p></li></ul><p></p><p><b>
Who you are</b></p><p>
We're looking for people who meet the minimum qualifications for this role. The preferred qualifications are great to have but are not mandatory.</p><p></p><p><b>
Minimum qualifications:</b></p><ul><li><p>
A minimum of 6-8 years of financial crime and investment compliance experience in a financial institution regulated by a UAE authority (CBUAE).</p></li><li><p>
Deep expertise in <b>UAE AML/CTF laws, DIFC/ADGM Rulebook, and local financial services regulations.</b></p></li><li><p><b>
Current resident of the UAE is mandatory.</b></p></li><li><p>
Written and verbal fluency in <b>English</b>.</p></li><li><p>
Ability to multitask effortlessly and handle challenging priorities under deadlines.</p></li><li><p>
Credible stakeholder engagement and management skills to align with our organisational values and behaviors.</p></li><li><p>
This role constitutes a Designated Function under the CBUAE Fitness and Propriety Regulation and is subject to the Central Bank approval and ongoing fitness and propriety assessment.</p></li></ul><p><b>
Preferred qualifications:</b></p><ul><li><p>
Previous experience as an MLRO or Deputy MLRO.</p></li><li><p>
Strong understanding of the payments industry.</p></li><li><p>
Professional proficiency in <b>Arabic</b> is a plus.</p></li></ul><h2 class="jobSectionHeader"><b>
Applicant Safety Policy: Fraud and Third-Party Recruiters</b></h2><p><i>
To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @</i><i>airwallex.com</i><i> email address. Please apply only through </i><i>careers.airwallex.com</i><i> or our official LinkedIn page.</i></p><p><i>
Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary.</i></p><p></p><h2 class="jobSectionHeader"><b>
Equal opportunity</b></h2><p>
Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don&rsquo;t regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.</p></div>

Compliance manager, MLRO

Confidential Government

<div>
 <p>
  <strong>
   Job Summary:
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
  The Senior Manager, Compliance is responsible for leading the organization's compliance function by establishing and maintaining an effective compliance framework, ensuring adherence to applicable laws, regulations, internal policies, and governance standards. The role provides strategic oversight of compliance risks, promotes a culture of integrity, and partners with business functions to strengthen regulatory compliance across the organization
 </p>
 <p>
  .Key Responsibilitie
 </p>
 <ul>
  <li>
   sLead the development, implementation, and continuous improvement of the organization's compliance framework
  </li>
  <li>
   .Ensure compliance with applicable laws, regulations, regulatory requirements, and internal policies
  </li>
  <li>
   .Identify, assess, and monitor compliance risks, and develop mitigation plans
  </li>
  <li>
   .Develop and maintain compliance policies, procedures, and standards
  </li>
  <li>
   .Conduct compliance reviews, monitoring activities, and internal assessments across business functions
  </li>
  <li>
   .Advise management on regulatory obligations and emerging compliance requirements
  </li>
  <li>
   .Coordinate regulatory inspections, audits, and responses to regulatory inquiries
  </li>
  <li>
   .Investigate compliance breaches and recommend corrective and preventive actions
  </li>
  <li>
   .Deliver compliance awareness programs and training to promote an ethical culture
  </li>
  <li>
   .Monitor changes in laws and regulations and assess their impact on the organization
  </li>
  <li>
   .Prepare compliance reports, dashboards, and presentations for executive management and governance committees
  </li>
  <li>
   .Collaborate with Internal Audit, Legal, Risk Management, HR, and business units to strengthen governance and internal controls
  </li>
  <li>
   .Oversee compliance with third-party, vendor, and contractual obligations where applicable
  </li>
  <li>
   .Manage the Compliance team's performance, development, and resource planning
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   .
   <br/>
   Qualificatio
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   ns
   <br/>
   Bachelor's degree in Law, Business Administration, Finance, Accounting, Risk Management, or a related fie
  </li>
  <li>
   <strong>
    ld.6&ndash;8 ye
   </strong>
   ars of progressive experience in Compliance, Risk Management and Governan
  </li>
 </ul>
 <p>
  <br/>
 </p>
 ce.
</div>


Senior Compliance Manager

Dance4Healing

<p><b>Senior NIH SBIR Grants &amp; Compliance Manager </b></p><p>Remote | Contract / Fractional Consultant</p><p><b>Apply here (required): https://bit.ly/D4H_FinanceTalent</b></p><p><i>Only applications submitted through this link will be reviewed.</i></p><p><b>Overview</b></p><p>Dance4Healing is seeking an experienced <b>Senior NIH SBIR Grants &amp; Compliance Manager</b> to oversee the post-award administration of our NIH-funded Small Business Innovation Research (SBIR) projects.</p><p>This is an ideal opportunity for an experienced NIH SBIR grants professional who enjoys helping innovative startups translate groundbreaking research into real-world impact while ensuring exceptional stewardship of federal funding.</p><p>Fractional consultants with extensive NIH SBIR post-award management experience are encouraged to apply.</p><p><b>About Dance4Healing</b></p><p>Founded by <b>Harvard and Stanford alumni</b>, Dance4Healing is an NIH-funded, award-winning digital health startup using AI, music, movement, and social connection to improve health outcomes for people living with chronic diseases.</p><p>Our research has demonstrated exceptional participant engagement, including a <b>Net Promoter Score of 91</b> in Stanford's Cancer Supportive Care Program.</p><p>Working alongside leading academic, healthcare, and community partners, we're developing culturally responsive AI-powered telehealth technologies designed to reduce health disparities while improving mobility, social connection, and long-term healthy habits.</p><p>You'll collaborate with a multidisciplinary team spanning behavioral science, public health, digital health, AI, data science, clinical research, and startup operations.</p><p><b>Why This Role Matters</b></p><p>This is far more than a compliance position.</p><p>You will serve as a trusted advisor to the Principal Investigator and leadership team, helping ensure every NIH dollar is managed responsibly, compliantly, and in support of meaningful health impact.</p><p>Your work will directly influence our ability to successfully execute federally funded research, prepare for future Phase II and commercialization opportunities, and build operational systems that support long-term growth.</p><p><b>What You'll Do</b></p><p>NIH SBIR Grant Administration</p><ul><li>Lead post-award administration of NIH SBIR grants from award through closeout</li><li>Ensure compliance with the Notice of Award (NoA), NIH Grants Policy Statement, Uniform Guidance (2 CFR Part 200), and other applicable federal requirements</li><li>Coordinate RPPRs, Federal Financial Reports (FFRs), prior approvals, closeout activities, and other NIH reporting requirements</li><li>Monitor burn rate, unobligated balances, budget modifications, and financial performance against project milestones</li><li>Identify compliance risks early and recommend corrective actions before they become issues</li></ul><p><b>Financial Stewardship</b></p><ul><li>Oversee procurement activities and consultant/subrecipient compliance</li><li>Review expenditures for allowability, allocability, and consistency with approved budgets</li><li>Work closely with our accountant/bookkeeper, providing guidance on NIH SBIR requirements when needed</li><li>Support budget forecasting, financial planning, and internal reporting for leadership</li></ul><p><b>Operations &amp; Compliance</b></p><ul><li>Develop and improve grant management processes, documentation, and internal controls</li><li>Maintain organized, audit-ready grant documentation and compliance records</li><li>Coordinate external monitoring visits, reviews, and audits</li><li>Track deadlines and ensure timely completion of all compliance activities</li><li>Serve as the primary resource for NIH grant administration and compliance questions</li></ul><p><b>Cross-Functional Leadership</b></p><ul><li>Collaborate closely with the Principal Investigator, research team, finance partners, consultants, and external stakeholders</li><li>Translate complex NIH policies into practical operational guidance</li><li>Help build scalable grant administration systems to support future NIH funding</li></ul><p><b>GenAI-Enabled Productivity</b></p><ul><li>Use GenAI tools (e.g., ChatGPT, Claude, Gemini, Microsoft Copilot) to accelerate policy research, document preparation, compliance tracking, meeting summaries, financial analysis, workflow automation, and operational planning while maintaining careful human review and compliance oversight</li></ul><p><b>What Success Looks Like (First 90 Days)</b></p><ul><li>NIH reporting calendar is organized and proactively managed</li><li>Budget tracking provides timely visibility into spending and burn rate</li><li>Grant documentation is complete, organized, and audit-ready</li><li>Procurement and consultant documentation consistently meets NIH requirements</li><li>Compliance risks are identified and resolved before becoming problems</li><li>Leadership receives timely financial and compliance information that supports informed decision-making</li></ul><p><b>Required Qualifications</b></p><ul><li>Bachelor's degree in Accounting, Finance, Business Administration, Public Administration, or related field</li><li><b>Minimum 5 years of experience managing NIH or other federal grants</b></li><li>Demonstrated experience with <b>NIH SBIR/STTR post-award administration</b></li><li>Strong working knowledge of NIH Grants Policy Statement, Notice of Award requirements, RPPRs, FFRs, and post-award compliance</li><li>Experience with federal procurement, consultant agreements, and subrecipient oversight</li><li>Strong financial analysis, budget monitoring, and reporting skills</li><li>Excellent organizational, analytical, written, and interpersonal communication skills</li><li>Ability to work independently in a fast-moving startup environment</li></ul><p><b>Preferred Qualifications</b></p><ul><li>Experience supporting NIH SBIR Phase I and/or Phase II awards</li><li>Familiarity with eRA Commons, Payment Management System (PMS), and federal grant reporting processes</li><li>Experience working with QuickBooks or similar accounting software</li><li>Familiarity with Google Workspace (Docs, Sheets, Drive)</li><li>Experience developing internal compliance policies and operational procedures</li><li>Certified Research Administrator (CRA) or similar credential is a plus</li><li>Experience using ChatGPT, Claude, Gemini, Microsoft Copilot, or similar GenAI platforms to improve compliance, reporting, documentation, and operational workflows</li></ul><p><b>Tools You'll Use</b></p><ul><li>Google Workspace</li><li>QuickBooks (working alongside our accounting partner)</li><li>eRA Commons</li><li>NIH RPPR and FFR workflows</li><li>Budget tracking spreadsheets</li><li>Procurement and contract documentation</li><li>ChatGPT</li><li>Claude</li><li>Gemini</li><li>Microsoft Copilot (or equivalent)</li><li>Project management and collaboration tools</li></ul><p><b>Who Thrives in This Role</b></p><ul><li>Professionals who enjoy bringing order to complex projects</li><li>People who proactively identify risks before they become problems</li><li>Individuals who combine compliance rigor with practical business judgment</li><li>Startup-minded operators who enjoy building scalable systems</li><li>Professionals who thoughtfully leverage GenAI to improve productivity without sacrificing accuracy or compliance</li></ul><p><b>Who Should NOT Apply</b></p><ul><li>Candidates seeking narrowly defined accounting or bookkeeping positions</li><li>Individuals whose experience is limited to pre-award grant writing without post-award administration</li><li>Professionals uncomfortable working in evolving startup environments</li><li>Candidates who rely on AI-generated content without careful human review</li><li>Individuals who prefer highly structured institutional environments with limited ownership</li></ul><p><b>Why Join Dance4Healing?</b></p><p>You'll help shape the operational foundation of an NIH-funded digital health company tackling one of healthcare's biggest challenges: reducing health disparities through culturally responsive technology.</p><p>Few opportunities offer the chance to combine <b>NIH SBIR expertise, startup innovation, AI-enabled operations, and meaningful public health impact</b> in a role where your work directly influences the success of both cutting-edge research and the organization's long-term growth.</p><p>Role Details</p><p><b>Employment Type:</b> Contract / Fractional Consultant (Flexible)</p><p><b>Location:</b> Remote</p><p><b>Schedule:</b> Flexible</p><p>Job Type: Contract</p><p>Pay: Up to $80,000.00 per year</p><p>Benefits:</p><ul><li>Flexible schedule</li></ul><p>Application Question(s):</p><ul><li>Have you applied at this link?  </li></ul><p>https://bit.ly/D4H_FinanceTalent</p><p>(Only applications submitted through this link will be reviewed)</p><p>Work Location: Remote</p>

Senior NIH SBIR Grants & Compliance Manager (Fractional/Contract) Remote

Riverside Research

<div>Riverside Overview: Riverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country&rsquo;s most challenging technical problems. All Riverside Research opportunities require U.S. Citizenship. Position Overview:
<div><i>
The Manager, Governance, Risk &amp; Compliance (GRC) leads Riverside Research's Governance, Risk, and Compliance program supporting the organization's unclassified enterprise and research information systems. Reporting to the Director of Information Security, this position is responsible for maintaining and continuously maturing Riverside's cybersecurity governance framework, enterprise risk management program, and regulatory compliance initiatives.</i></div><div></div><div><i><br>
This role serves as both a people leader and technical contributor, providing leadership for a team of GRC professionals while partnering across Information Security, Information Technology, Contracts, Human Resources, Finance, Legal, and Business Operations to ensure cybersecurity and compliance objectives align with organizational and customer requirements.</i></div><div></div><div><i><br>
The Manager owns Riverside's Cybersecurity Maturity Model Certification (CMMC) program, leading continuous readiness activities, regulatory assessments, governance initiatives, and enterprise risk management efforts to maintain the organization's strong cybersecurity posture and support Department of Defense mission requirements.</i></div>
Responsibilities:
<ul><li><i>Lead Riverside Research's Governance, Risk, and Compliance (GRC) program supporting the enterprise cybersecurity strategy, governance framework, and compliance objectives.</i></li><li><i>
Own Riverside's Cybersecurity Maturity Model Certification (CMMC) program, ensuring continuous readiness for annual affirmations and Certified Third-Party Assessment Organization (C3PAO) assessments.</i></li><li><i>
Lead and mentor a team of GRC Analysts, establishing priorities, developing staff, and fostering a culture of accountability, collaboration, and continuous improvement.</i></li><li><i>
Develop, maintain, and govern enterprise cybersecurity policies, standards, procedures, and supporting documentation.</i></li><li><i>
Lead Riverside's Enterprise Risk Management (ERM) program by facilitating risk identification, assessment, mitigation planning, and executive reporting.</i></li><li><i>
Drive continuous monitoring activities through operational oversight, technical auditing, internal control assessments, and compliance reviews to ensure adherence to regulatory, contractual, and organizational security requirements.</i></li><li><i>
Manage corrective action plans, findings, Plans of Action &amp; Milestones (POA&amp;Ms), and remediation activities through closure.</i></li><li><i>
Provide governance oversight for cybersecurity programs including identity and access management, vulnerability management, configuration management, incident response, security awareness, external information sharing, third-party risk management, and data protection.</i></li><li><i>
Partner with Information Technology and Information Security teams to ensure enterprise architecture and technology solutions align with cybersecurity strategy, regulatory requirements, and organizational risk tolerance.</i></li><li><i>
Maintain awareness of evolving FAR, DFARS, CMMC, NIST, and Department of Defense cybersecurity requirements, advising leadership on regulatory changes and organizational impacts.</i></li><li><i>
Develop executive dashboards, metrics, and reports that communicate cybersecurity posture, enterprise risk, and compliance status to senior leadership.</i></li><li><i>
Collaborate with business stakeholders including Contracts, Human Resources, Finance, Legal, Marketing, and Business Operations to integrate cybersecurity governance into business processes.</i></li><li><i>
Serve as a trusted advisor to leadership by translating cybersecurity, compliance, and enterprise risk into actionable business recommendations.</i></li></ul>
Qualifications:
<h3 class="jobSectionHeader"><b><i>Required Qualifications</i></b></h3><ul><li><i>
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Business, or a related discipline.</i></li><li><i>
Twelve (12) years of progressively responsible experience in cybersecurity, information assurance, governance, risk, compliance, or related disciplines, including at least three (3) years of leadership experience managing technical teams or enterprise cybersecurity programs.</i></li><li><i>
Demonstrated success leading external security assessments, regulatory audits, or certification efforts within a regulated industry such as the Defense Industrial Base, government contracting, financial services, healthcare, or telecommunications.</i></li><li><i>
Strong knowledge of Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, Department of Defense Controlled Unclassified Information (CUI) requirements, and applicable FAR and DFARS cybersecurity clauses.</i></li><li><i>
Experience developing and maintaining cybersecurity governance programs, policies, standards, and enterprise compliance initiatives.</i></li><li><i>
Strong understanding of enterprise information technology including Microsoft 365, Microsoft Entra ID, Microsoft Azure, Amazon Web Services (AWS), virtualization, and hybrid infrastructure.</i></li><li><i>
Excellent written, verbal, and presentation skills with the ability to communicate complex technical concepts to executive leadership and non-technical stakeholders.</i></li><li><i>
Demonstrated ability to lead cross-functional initiatives, influence organizational change, and build collaborative relationships across multiple business functions.</i></li><li><p><i>
Must live or relocate to a commutable distance of Beavercreek, Ohio</i></p></li></ul><h3 class="jobSectionHeader"><b><i>
Preferred Qualifications</i></b></h3><ul><li><i>
Experience maintaining a certified CMMC Level 2 environment.</i></li><li><i>
Experience leading Certified Third-Party Assessment Organization (C3PAO) assessments and/or DIBCAC assessments.</i></li><li><i>
Experience leading Enterprise Risk Management (ERM) programs.</i></li><li><i>
Experience with cloud security, Data Loss Prevention (DLP), Third-Party Risk Management, Cyber Supply Chain Risk Management (C-SCRM).</i></li><li><i>
Industry certifications such as </i><i>Certified Information Systems Security Professional (CISSP)</i><i>, </i><i>Certified Information Security Manager (CISM)</i><i>, </i><i>Certified Information Systems Auditor (CISA)</i><i>, </i><i>Certified in Risk and Information Systems Control (CRISC)</i><i>, </i><i>Certified in Governance, Risk and Compliance (CGRC)</i><i>, or </i><i>Certified Cloud Security Professional (CCSP)</i><i>.</i></li></ul>
Global Comp: $140,000- $170,000 This represents the typical compensation range for this position based on experience, location and other factors. Closing Statement: Riverside Research Institute is a not-for-profit, technology-oriented defense company, where service to our customers and support of our staff is our overall mission. Riverside is an affirmative action-equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring. Riverside offers comprehensive compensation and benefit packages to our employees. Riverside bases its employment decisions solely on technical experience, qualifications and other job-related criteria related to our organizational purpose as a not-for-profit company, and without regard to race, color, religion, age, sex marital status, sexual orientation, national origin, physical or mental disability, veteran&rsquo;s status or any other status legally protected by applicable federal, state, and local law.</div>

Governance, Risk & Compliance (GRC) Manager

ECS Limited

<div>What You'll Do:
<ul><li>This position involves project management of code compliance projects, including reviewing plans, providing technical support, conducting inspections, monitoring project process for performance and budgetary conditions, proposal preparation, as well as attending project site meetings, and assisting with the resolution of technical and administrative problems</li><li>
In this position you will be expected to mentor and train other building inspectors</li><li>
Responsibilities also include assisting with management of P &amp; L, marketing our services by maintaining and developing client interactions, and participating in marketing and business development functions related to code inspections</li></ul>
What We're Looking For:
<ul><li><div>
High School Diploma or GED</div></li><li><div>
A minimum of 5 years of experience in code compliance inspection of mechanical, electrical, plumbing, and fire protection systems and/or plan review</div></li><li><div>
Must have valid ICC certification B2, M2, P2, E2</div></li><li><div>
If driving for, or on behalf of, any ECS subsidiary, a valid driver&rsquo;s license is required</div></li></ul>
Who We Are:
<div>
ECS Group of Companies (ECS) was founded in 1988 with the goal to raise the standards of professional engineering consulting. Today, we are a leader in geotechnical, construction materials, environmental and facilities consulting services. We are employee-owned with more than 3,000 employees in 100+ offices and testing facilities coast to coast. ECS is currently ranked #60 in Engineering News-Record&rsquo;s Top 500 Design Firms (April 2026), #148 in Engineering News-Record&rsquo;s Top 200 Environmental Firms (October 2025) and #50 in Zweig Group&rsquo;s Hot Firm List (May 2025). For additional information about ECS, visit: www.ecslimited.com.</div><div></div><div><br>
ECS is an Equal Opportunity Employer. To learn more, click here.</div></div>

Code Compliance Project Manager

Lenovo

<div><div><div><div><h3 class="jobSectionHeader"><b>General Information
</b></h3></div></div><div><div><div><div>Req #
</div><div>WD00101168
</div></div><div><div>Career area:
</div><div>Information Technology
</div></div><div><div>Country/Region:
</div><div>United States of America
</div></div><div><div>State:
</div><div>North Carolina
</div></div><div><div>City:
</div><div>Morrisville
</div></div><div><div>Date:
</div><div>Thursday, July 9, 2026
</div></div><div><div>Working time:
</div><div>Full-time
</div></div><div><div><b>Additional Locations</b>:
<ul><li>United States of America - North Carolina - Morrisville
</li></ul></div></div></div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Why Work at Lenovo
</b></h3></div></div><div><div><div><div><div><div>We are Lenovo. We do what we say. We own what we do. We WOW our customers.</div><div></div><div><br>
Lenovo is a US$83 billion revenue global technology powerhouse, ranked #196 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world&rsquo;s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo&rsquo;s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).</div></div><br>
<div></div><br>
<div>This transformation together with Lenovo&rsquo;s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.</div>
</div></div></div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Description and Requirements
</b></h3></div></div><div><div><div><div><p><b>Position Summary</b></p><p>
The Senior Manager, CRA Compliance Program serves as the enterprise execution lead for the EU Cyber Resilience Act (CRA) compliance program across in‑scope products, services, and supporting systems. EU CRA is a priority regulatory program with defined timelines, regulatory obligations, and audit expectations.</p><p>
This role owns delivery execution, operating rhythm, and people leadership for the compliance and certifications function, ensuring consistent execution, prioritization, and quality across the portfolio.</p><p><b>
Key Responsibilities</b></p><p><b>
Compliance Portfolio Leadership &amp; Program Execution</b></p><ul><li>
EU Cyber Resilience Act is a priority regulatory program with defined delivery timelines and regulatory obligations that must be met across the portfolio.</li><li>
Lead execution of a portfolio of security compliance and certification initiatives, ensuring delivery against regulatory, certification, and customer requirements.</li><li>
Accountable for execution delivery across the compliance portfolio. Regulatory interpretation and final compliance positions are owned by designated central GRC, Legal, or Security leadership.</li><li>
Define execution strategies, operating models, and delivery plans for supported compliance programs.</li></ul><ul><li>
Maintain oversight of scope, timelines, dependencies, and milestones across the portfolio.</li><li>
Maintain end-to-end traceability between regulatory requirements, implemented controls, and supporting evidence across all supported programs.</li><li>
Provide compliance execution leadership across Product Security, IT, Legal, Privacy, Supply Chain, and external partners.</li><li>
Resolve execution conflicts, manage dependencies, and drive alignment across stakeholders.</li></ul><p><b>
People Leadership &amp; Organizational Management</b></p><ul><li>
Directly manage and develop subordinate contributors.</li><li>
Ensure clear accountability for compliance deliverables, deadlines, and evidence quality across team members.</li><li>
Set priorities, allocate workload, and ensure clarity of roles and accountability across the team.</li><li>
Coach team members on regulatory interpretation, documentation quality, audit readiness, and stakeholder engagement.</li></ul><p><b>
Documentation, Evidence &amp; Quality Oversight</b></p><ul><li>
Ensure development and maintenance of high‑quality compliance documentation, technical descriptions, policies, procedures, and evidence repositories.</li><li>
Define and enforce standards for documentation quality, traceability, and audit defensibility.</li><li>
Establish governance expectations for systems of record supporting compliance tracking and evidence management.</li><li>
Ensure supporting documentation is maintained in the system of record.</li><li>
Establish quality standards for documentation and evidence used in audits, certifications, and regulatory reviews.</li><li>
Review and approve key artifacts prior to external submission or assessment activities.</li></ul><p><b>
Risk, Issue &amp; Escalation Management</b></p><ul><li>
Oversee identification, assessment, and tracking of compliance risks, gaps, and remediation activities across the portfolio.</li><li>
Has authority to escalation non-compliance and enforce remediation timelines through executive governance channels.</li><li>
Escalate material risks, blockers, or delivery concerns to leadership with impact analysis and recommendations.</li><li>
Ensure remediation activities are prioritized and validated.</li></ul><p><b>
Audit, Certification &amp; Regulatory Engagement Support</b></p><ul><li>
Provide leadership for audit, certification, and regulatory readiness activities.</li><li>
Oversee preparation and coordination of responses to assessments, findings, and regulatory inquiries.</li><li>
Ensure the organization maintains a continuously audit‑ready posture.</li></ul><p><b>
Reporting &amp; Executive Communication</b></p><ul><li>
Provide regular status and readiness reporting to leadership.</li><li>
Prepare executive‑level briefings, summaries, and decision materials.</li><li>
Communicate clearly and consistently to enable timely decisions and alignment.</li></ul><p><b>
Required Skills &amp; Competencies</b></p><ul><li>
Senior‑level experience in cybersecurity compliance, assurance, or certification programs.</li><li>
Proven ability to lead multi‑initiative compliance portfolios.</li><li>
Strong execution and program leadership skills applied to regulatory and certification‑driven environments.</li><li>
Demonstrated people‑management and team‑development experience.</li><li>
Strong judgment, prioritization, and escalation capabilities.</li><li>
Excellent written and verbal communication skills.</li></ul><p><b>
Qualifications</b></p><ul><li>
Bachelor&rsquo;s degree in cybersecurity, information systems, engineering, law, or a related field required.</li><li>
12+ years of experience in cybersecurity, compliance, risk, product security, assurance, or related disciplines.</li><li>
Demonstrated experience leading audits, certifications, or regulatory compliance initiatives.</li><li>
Experience with EU CRA regulations and compliance strongly preferred.</li><li>
Professional certifications such as CISSP, CISM, CISA, PMP, or ISO/IEC 27001 Lead Implementer strongly preferred.</li></ul><p><b>
Availability &amp; Travel</b></p><ul><li>
Availability to support audit, certification, or regulatory activities during business hours, with occasional off‑hours engagement.</li><li>
Occasional travel may be required for audits, assessments, or executive stakeholder engagements.</li></ul><div><p>
The base salary budgeted range for this position is $160k - 190K. Individuals may also be considered for bonus and/or commission.</p><p>
Lenovo&rsquo;s various benefits can be found on www.lenovobenefits.com.
</p><p>In compliance with Colorado's EPEWA, the expected application deadline for this position is August 27, 2026. This applies to both external and internal candidates.
</p><p>#LI-FL1</p><p>
#LI-Remote</p></div><br>
</div></div><div><div><div><i>We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.</i></div>
</div></div></div></div></div><div></div><div><div><div><div><div><b>Additional Locations</b>:
<ul><li>United States of America - North Carolina - Morrisville
</li></ul></div></div><div><ul><li>United States of America
</li></ul></div><div><ul><li>United States of America - North Carolina
</li></ul></div><div><ul><li>United States of America - North Carolina - Morrisville</li></ul></div></div></div></div></div>

Sr. Manager, Cyber Resilience Act Compliance

Williams-Sonoma, Inc.

<div><div><b>About the Team
</b></div><p>The Security Compliance Team is responsible for Williams-Sonoma, Inc.&rsquo;s enterprise security compliance, third-party risk, and cybersecurity risk management programs. The team is comprised of subject matter experts who partner with the business to deliver compliance solutions in a dynamic environment.<br>
</p><p></p><p>Founded in 1956, Williams-Sonoma, Inc. is the premier specialty retailer of high-quality products for the kitchen and home in the United States. Our family of brands are Williams-Sonoma, Pottery Barn, Pottery Barn Kids, PBteen, West Elm, Williams-Sonoma Home, Rejuvenation, Mark and Graham and GreenRow. We're a multi-brand, multi-channel, global enterprise supported by state-of-the-art technology and some of the most talented teams in retailing - and we're always looking for new energy and ideas.<br>
</p><p></p><p><b>About the Role
</b></p><p>The Manager, Security Compliance leads the team and is responsible for setting strategy, establishing standards, and ensuring effective execution across the Security Compliance function.
</p><p>Reporting to the CISO, this leader manages a team of security compliance professionals and contractors, with accountability for program outcomes, team performance, and enterprise risk visibility. The role partners closely with Technology, Legal, Internal Audit, and business stakeholders to ensure a scalable, risk-aligned control environment.
</p><p>This position plays a critical role in maintaining audit readiness, strengthening the company&rsquo;s control framework, and providing clear, actionable insight into compliance posture, risks, and remediation progress to executive leadership and the Board.<br>
</p><p></p><p><b>Responsibilities
</b></p><ul><li><div>Lead and evolve the Security Compliance function, managing a high-performing team and driving consistent, high-quality execution across all program areas
</div></li><li><div>Own and govern the enterprise security compliance and control framework, ensuring alignment with regulatory requirements and industry standards (PCI DSS, NIST, GDPR, CPRA, SOX) and driving continuous improvement
</div></li><li><div>Oversee key compliance programs, including PCI, SOX, and privacy, ensuring audit readiness, effective control operation, and successful assessments
</div></li><li><div>Lead the Third-Party Risk Management program, establishing scalable, risk-based processes for vendor assessment, monitoring, and governance, and providing clear visibility into third-party risk exposure
</div></li><li><div>Drive the enterprise cybersecurity risk management program, ensuring risks are identified, prioritized, and remediated with clear accountability and executive visibility
</div></li><li><div>Partner cross-functionally with Technology, Legal, Internal Audit, and business teams to embed security and compliance into operations and decision-making
</div></li><li><div>Own audit and regulatory engagement, serving as the primary liaison with Internal Audit and ensuring efficient, well-coordinated audit execution
</div></li><li><div>Provide clear, actionable reporting to executive leadership and the Board, translating complex risk and compliance topics into meaningful insights
</div></li><li><div>Shape and mature the security awareness program, measurably improving human risk outcomes and strengthening the company&rsquo;s overall security posture
</div></li><li><div>Success in this role is defined by the effectiveness of the control environment, clarity of risk visibility, and the organization&rsquo;s ability to sustain audit readiness and compliance at scale<br>
</div></li></ul><div></div><p><b>Criteria
</b></p><ul><li><div>You have minimum of 6 + years of related experiences (information security, risk, or compliance), including people management experience driving results, creating solutions and achieving as one team
</div></li><li><div>Bachelor's degree in Risk Management, or related fields, or equivalent work experience
</div></li><li><div>You have deep expertise in SOX, privacy regulations, and third-party risk management, and strong working knowledge of PCI DSS
</div></li><li><div>You have strong decision-making, conflict resolution skills and experience leading teams and scaling enterprise compliance and risk programs
</div></li><li><div>You are effective at driving accountability across both direct reports and cross-functional stakeholders
</div></li><li><div>You are comfortable engaging with executive leadership and board-level audiences
</div></li><li><div>You can translate complex regulatory requirements into practical, business-aligned control strategies
</div></li><li><div>You bring a strong risk-based mindset, balancing compliance obligations with operational effectiveness
</div></li><li><div>Relevant certifications such as CISSP, CISM, CISA, CRISC, or PCI ISA/QSA are preferred
</div></li><li><p>This role requires being onsite in the Rocklin, CA office, Monday through Thursday and Friday as optional in the office
</p></li><li><p>You have the following technical competencies:
</p><ul><li><div>Deep understanding of security and compliance frameworks (PCI DSS, NIST, ISO 27001, SOX)
</div></li><li><div>Experience with third-party risk management methodologies and tools
</div></li><li><div>Experience with GRC platforms and compliance automation
</div></li><li><div>Strong risk assessment and control evaluation knowledge
</div></li><li><div>Excellent written and verbal communication skills
</div></li><li><div>Strong program leadership and prioritization capabilities
</div></li><li><div>Experience working within the retail sector<br>
</div></li></ul></li></ul><p></p><p>Our Culture &amp; Values
</p><p>We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.<br>
</p><p></p><p>People First
</p><p>Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:<br>
<br>
<br>
</p><p>Benefits
</p><ul><li><div>A generous discount on all WSI brands
</div></li><li><div>A 401(k) plan and other investment opportunities
</div></li><li><div>Paid vacations, holidays, and time off to volunteer
</div></li><li><div>Health benefits, dental and vision insurance, including same-sex domestic partner benefits
</div></li><li><div>Tax-free commuter benefits
</div></li><li><div>A wellness program that supports your physical, financial and emotional health<br>
</div></li></ul><p></p><p>Continued Learning
</p><ul><li><div>In-person and online learning opportunities through WSI University
</div></li><li><div>Cross-brand and cross-function career opportunities
</div></li><li><div>Resources for self-development
</div></li><li><div>Advisor (Mentor) program
</div></li><li><div>Career development workshops, learning programs, and speaker series<br>
</div></li></ul><p></p><p><i>WSI will not now or in the future commence an immigration case or &quot;sponsor&quot; an individual for this position (for example, H-1B or other employment-based immigration).<br>
</i></p><p></p><p><i>This role is not eligible for relocation assistance.<br>
</i></p><p></p><p><i>Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.<br>
</i></p><p></p><p><i>The expected starting pay range for this position is $150,000 - $180,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.<br>
</i></p><p></p><p>#LI-JC1</p></div>
<br><div><div><div><div><div>Our Company
<br>
<br>
Founded in 1956, Williams-Sonoma, Inc. is the premier specialty retailer of high-quality products for the kitchen and home in the United States. Our family of brands are Williams Sonoma, Williams Sonoma Home, Pottery Barn, Pottery Barn Kids, Pottery Barn Teen, Rejuvenation, West Elm, Mark &amp; Graham, Outward, and GreenRow. These brands are among the best known and most respected in the industry. We offer beautifully-designed, stylish and functional products for every area of the home, including the kitchen, living room, bedroom, home office, closet, laundry room and even outdoor spaces. We've seen some big changes since our first brick-and-mortar store opened more than half of a century ago. What hasn't changed is our passion for high-quality products, functional design, outstanding customer service, and enhancing the lives of our customers and the communities where we operate. Today, we're a multi-brand, multi-channel, global enterprise supported by state-of-the-art technology and some of the most talented teams in retailing - and we're always looking for new energy and ideas.</div></div></div></div></div>

Manager Technology, Security Compliance

Search 9416+ Compliance manager jobs near you this August. New roles added regularly across leading industries. Apply today.