Compliance Officer

Aras is looking for a Compliance Officer ( for Polish Office) to provide excellence in our Aras Enterprise Services Governance, Risk, and Compliance (GRC) management. 

The ideal candidate will have an expert understanding and experience with GRC and the related practices to ensure effective and efficient compliance in all organizational activities. This candidate must have expertise in maintaining certifications such as ISO27001, SOC 2 or CSA STAR, and TRUSTe, CCPA for SaaS or managed services organizations.  

This role is a unique opportunity to contribute to our commitment to security and compliance, ensuring the trust of our customers who rely on us to operate our platform in the cloud. This role strategically drives our security and compliance posture's policies, procedures, communication, and deployment patterns.  We would love to hear from you if you are passionate about GRC and have a proven track record in maintaining compliance in a dynamic tech environment. 

Responsibilities: 

• Ensure the robustness of our compliance and security controls for customers using our flagship Aras Innovator platform in the cloud. 
• Maintain certifications such as ISO27001, SOC 2, CSA STAR, and TRUSTe, and ensure CCPA compliance for SaaS or managed services organizations. 
• Act as a Subject Matter Expert (SME) for the Aras Enterprise services and systems and maintain organizational controls for security and compliance in cloud systems running on Azure and potentially other providers in the future. 
• Collaborate with the Product Security team and the Global Cloud Services (GCS) team to ensure comprehensive monitoring and documentation for effective compliance. 
• Maintain ongoing internal audits and reviews of RFx (x, I – Information, P – Proposal, Q – Quote) to collect evidence for smooth external auditing sessions. 
• Drive the strategic development and implementation of policies, procedures, communication, and deployment patterns for our security and compliance posture maintenance. 

Basic Qualifications: 

• Must have experience in compliance activities in an organization that has achieved certifications in (ISO27001, SOC 2, CSA STAR or equivalent). 
• Ability to communicate effectively (written and verbal) and work with cross-functional teams and senior management. 
• Knowledge of security and compliance requirements for cloud computing technologies. 
• Positive attitude and a strong commitment to delivering quality work. 

Preferred Qualifications: 

• Experience in creating GRC policies and controls or participating in their creation and maintenance. 
• Familiarity with tools such as ZenGRC. 
• Experience using tools such as Loopio to maintain accurate responses to RFx questions. 
• Ability to independently complete and maintain CAIQ or similar documentation. 
• Knowledge of CCPA and GDPR for SaaS or managed services organizations.