Job Description:
This role is crucial to ensuring that our contracts, vendor agreements, and internal processes meet all internal, external, and regulatory compliance standards. The ideal candidate will have a strong understanding of data privacy, compliance frameworks, and contract lifecycle management, with the ability to manage multiple priorities in a fast-paced environment.
Shift: 9:30PM-7AM Mon-Fri; Hybrid setup with at least 2 days onsite weekly
Salary Range: 30-40K
Main Duties and Responsibilities:
- Contract Review & Compliance
- Review, draft, and negotiate contracts with clients, vendors, and third parties to ensure compliance with legal, regulatory, and internal standards.
- Ensure all contracts adhere to company policies and meet both external and regulatory requirements.
- Update key standard documents as needed by company process or regulatory change.
- Undertake due diligence and flag any conflict of interest.
- Answer security questionnaires from existing and potential clients.
- Maintain proper contract lifecycle management, including managing contract inventory, ensuring timely contract renewals, and adhering to proper filing and signature protocols.
- Internal & Regulatory Compliance
- Conduct internal compliance audits to assess company practices against regulatory and industry standards.
- Perform data flow mapping and Data Protection Impact Assessments (DPIAs) to evaluate data handling practices and ensure GDPR, CCPA, and other data protection regulations are being followed.
- Ensure the company remains compliant with data protection laws and other applicable regulations, updating policies and processes as needed.
- Lead internal compliance disciplinary procedures and processes.
- Information Security & Data Privacy Training
- Develop, implement, and manage information security and data privacy training programs across the company to ensure all employees are aware of compliance requirements.
- Conduct regular training sessions to promote awareness and educate teams on data protection, security protocols, and risk management practices.
- Regulatory Compliance Efforts
- Monitor and assess changes in relevant laws, regulations, and industry standards, ensuring the company remains compliant with any new or updated requirements.
- Work closely with the legal and compliance teams to update policies, procedures, and documentation in response to regulatory changes.
- Collaboration & Stakeholder Communication
- Work closely with cross-functional teams, including legal, finance, IT, and operations, to ensure compliance is embedded throughout the organization.
- Provide guidance and support to departments on compliance-related matters, including contract negotiations, data privacy issues, and regulatory questions.
- Contract Management & Reporting
- Maintain up-to-date contract records, including renewals, amendments, and compliance documents.
- Provide regular reports to senior management regarding contract status, compliance audits, and any identified risks or issues.
Qualifications (Skills and Experience):
- Bachelor’s degree in Law, Business, Compliance, or a related field.
- Experience in contract management, compliance, or related roles.
- Strong understanding of contract law and regulatory frameworks, including GDPR, CCPA, HIPAA, and other data protection laws.
- Experience in conducting internal compliance audits, risk assessments, and regulatory reporting.
- Familiarity with Data Protection Impact Assessments (DPIAs) and data flow mapping.
- Experience managing information security and data privacy training programs.
- Attention to detail and organizational skills, with the ability to manage multiple priorities and deadlines.
- Excellent written and verbal communication skills, with the ability to engage with stakeholders at all levels of the organization.
- Ability to work both independently and collaboratively in a team environment.
- Certification in contract management, compliance, or data privacy (e.g., CIPP, CCP, or equivalent) is a plus
Find out more about Civicom Pacific at www.civi.com and our Feathers Project at www.feathersproject.org.