Senior Compliance Officer

Senior Compliance Officer – Thales

Join to apply for the Senior Compliance Officer role at Thales.

The Senior Cloud Services Compliance Officer is responsible for leading and overseeing compliance initiatives for Cloud Services across a cloud services domain level, with a focus on managing complex audit processes, customer security and compliance assessments, regulatory compliance, and internal security and privacy programs. This individual will collaborate with senior management of business units and external stakeholders to ensure compliance with internal policies, industry standards, and regulatory requirements across multiple jurisdictions.

The Senior Compliance Manager will also play a critical role in supporting strategic direction for compliance practices, driving continuous improvement, and ensuring robust risk mitigation in Cloud Services operations.

• Cybersecurity Compliance Programs:
  • Serve as the point of contact for managing all compliance and audit activities related to assigned Cloud Services, acting as a trusted partner to the assigned Cloud Services.
  • Lead interactions with both internal and external auditors (including external regulatory bodies, internal Thales auditors, and third‑party auditors), ensuring efficient and effective audit processes.
  • Support the development, implementation, and maintenance of compliance programs to meet the organization’s strategic objectives and regional regulatory requirements.
• Audit Strategy and Execution:
  • Lead the preparation and execution of internal and external audits across assigned Cloud Services, ensuring compliance with established corporate policies/standards, industry standards, and regulatory requirements.
  • Develop and implement audit strategies for the assigned Cloud Services, ensuring audits are proactive, risk‑based, and aligned with business priorities, while ensuring a continuous improvement approach.
• Advanced Compliance and
  
  Risk Management:
  
  
  • Lead and enhance the risk management and improve controls for assigned Cloud Services, ensuring compliance with both internal policies and external regulatory requirements.
  • Support and improve the Cloud Services Change Management, Business Continuity Plan (BCP), and Disaster Recovery (DR) related controls to ensure compliance with corporate policy/standards and business continuity regulations and best practices.
  • Maintain and update key governance, risk management and compliance documentation, including ISMS 27001, ISO 27017/18 mandatory documents, ensuring alignment with corporate policy and evolving industry standards.
• Policy Development and Process Improvement:
  • Support the develop, review, and implementation of cybersecurity compliance policies, standards and procedures to continue improving internal controls, audit readiness, and risk mitigation.
  • Recommend and drive the implementation of cybersecurity policies and standards aimed at improving Cloud Services’ compliance posture, ensuring policies are aligned with business objectives and regulatory expectations.
  • Regularly assess and refine compliance workflows to optimize efficiency and alignment with evolving compliance frameworks.
• Global Compliance Management:
  • Partner with cross‑functional teams in analyzing cybersecurity compliance requirements across functions, ensuring adherence to local and international regulations (e.g., GDPR, CCPA).
  • Support the development of global compliance strategies, ensuring supported Cloud Services units are aware of evolving global cybersecurity and privacy laws and that cross‑border data transfers are compliant with corporate policies and standards.
• Support and Advisory for Cloud Services Units:
  • Provide cybersecurity compliance guidance and support to sales, presales, product management, and other business units on cybersecurity compliance‐related matters, including RFPs, RFIs, security & compliance questionnaires, and client security inquiries.
  • Be the primary advisor to assigned Cloud Services on complex compliance and security topics, providing recommendations for risk mitigation, process improvements, and regulatory adherence.
• Customer and Stakeholder Engagement:
  • Engage directly with key customers to…