About Dropsuite
Dropsuite (listed DSE:ASX) safeguards business information. We are a global, fast-growing, partner-centric company building secure, scalable, and highly usable cloud backup technologies for businesses. Our mission is to help businesses stay in business. Dropsuite performs billions of backups per day for organizations in more than 100 countries around the globe.
Dropsuite is known for its team of ‘hungry owners.’ We are hungry to win and tenacious, but at the same time we all are owners: we do not cut corners and always seek to do the right thing. We are experts in what we do, are highly customer focused and we love solving problems. We play as a team, where respect is one of our key values and we see helping others as a priority.
About the Role
We are looking for a Compliance Analyst to join our team! In this role, you will report directly to the Director of Security and Governance. You will be responsible for compliance initiatives (like rollout of CIS standards, SOC 2- Type 2, NIS -2 and others) for the company. You will work closely with IT, HR, Finance and engineering to create and govern security policies. You will be responsible for all Security, IT and compliance related audits with internal and external stakeholders.
This Compliance Analyst role is ideal for someone with 8-10 years of experience with experience in leading initiatives like SOC 2, GDPR or similar compliance initiatives.
What will you be doing
- Regulatory Compliance
- Oversee and ensure compliance with GDPR, HIPAA, SOC 2 Type 2, CyberEssentials, ISO 27001, and other relevant standards in the US, EU, and APAC regions.
- Interface with auditors and stakeholders towards obtaining necessary certification and maintaining compliance
- Communicating with our partners/customers on our security and compliance standards
- Cross-Regional Expertise
- Possess a deep understanding of regulations across different regions (US, EU, APAC - AU, JP, SG) and industries.
- Strong understanding of data related regulations in EU (like GDPR), USA (like the CLOUD Act, HIPAA) and Asia (like PDPA)
- Policy Development
- Develop, and maintain comprehensive security policies and procedures.
- Rollout these policies and procedures in partnership with HR, IT and leadership
- Risk Management
- Assess and manage risks associated with operations in diverse regions, industry sectors, and compliance standards.
- Communication and Training
- Effectively communicate complex compliance requirements to employees and conduct training programs.
- Manage Stakeholders with continues communication
- Drive change and rollout new policies effectively
- Audit and Assessment
- Manage external and internal audits and assessments
- Ensure compliance with SOC 2 Type 2 and ISO27001 standards
- Continuous Learning
- Stay updated on regulatory developments and industry trends, fostering a culture of continuous learning.
- Enhance internal understanding of the regulatory developments by way of newsletters
Our ideal candidate has
- Tertiary education in relevant field.
- At least 8 years' experience as data privacy officer/compliance officer
- Certification in CCEP, CRCM, CRCMP and/or CRP is a plus
- Understands Security standards and Compliance needs of a Saas Software platform
- Experience in a compliance role in Government related services or Enterprise software vendors is mandatory
- Experience in obtaining a major certification like ISO-27001 is a major plus
- Good understanding of privacy and commercial laws the APAC, EU and US regions.
- Self-motivated and can work independently.
- Proven experience in a similar compliance role, preferably in a multinational setting.
- Para-legal experience is a plus point.
What we offer
- Competitive compensation
- Long term incentives (e.g., Stock options or performance shares – subject to performance)
- Hybrid working model
- 18 days of annual leave (with accrual up to 20 days)
- Health Insurance for you and your dependents
- Growth opportunities
- Work in a global company with meaningful work, highly skilled colleagues, and an amazing culture
If the above excites you and you are the person we are looking for; please submit your CV, your availability and desired salary. We regret to inform that only shortlisted candidates will be contacted.
Posting Statement
Dropsuite is an Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
Please note that only applicants residing and eligible to work in Singapore will be considered.