Senior Compliance Specialist
Listed on 2026-10-31
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Business Analyst
Are you looking to power the next leap in the exciting world of advanced electronics? Do you want to help solve problems that drive success in the rapidly evolving technology and connectivity landscape? Then bring your problem‑solving, passion, and creativity to help us power the next leap in electronics. At Qnity, we’re more than a global leader in materials and solutions for advanced electronics and high‑tech industries – we’re a tight‑knit team that is motivated by new possibilities, and always up for a challenge.
All our dedicated teams contribute to making cutting‑edge technology possible. We value forward‑thinking challengers, boundary‑pushers, and diverse perspectives across all our departments, because we know we play a critical role in the world enabling faster progress for all. Learn how you can start or jumpstart your career with us.
The Senior Compliance Specialist supports the overarching Digital Technology Risk & Compliance program. The role is responsible for planning, governing, and reporting on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001, so that obligations are understood, owned, and met consistently across jurisdictions and business units. The position partners cross‑functionally with business, IT, Legal, Security, Internal Audit, Finance, and operations teams to maintain the compliance obligations inventory, coordinate audits and certifications, track remediation, and provide leadership with clear visibility into Qnity’s compliance posture.
Key Responsibilities- Compliance Program Management
· Support the day‑to‑day management DT compliance program, including program scope, operating model, and the annual compliance plan. - · Plan and manage the compliance calendar, covering assessments, certifications, and control testing cycles.
- · Define and track program performance indicators and prepare compliance status reporting and dashboards for leadership and governance forums.
- · Facilitate compliance governance meetings and management reviews, tracking decisions and action items to closure.
- · Drive compliance awareness and training for control owners and stakeholders.
- Framework and Regulatory Compliance Oversight
· Coordinate SOX 404 IT compliance activities for IT General Controls (ITGCs), IT Application Controls (ITACs), and automated controls, including control testing, evidence collection, deficiency tracking, and remediation, in partnership with Internal Audit, External Audit, Finance, and IT. - · Plan, govern, and report on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001.
- · Use the Unified Controls Framework to map and rationalize controls across frameworks, reducing duplicate testing and evidence requests.
- Stakeholder Management and Continuous Improvement
· Partner with business, IT, Legal, Security, HR, facilities, engineering, and operations teams to embed compliance requirements into day‑to‑day processes. - · Monitor corrective actions and remediation plans, and enforce time to resolution.
- · Identify opportunities to streamline compliance processes through GRC tools and automation.
- · Provide guidance to control owners and compliance team members on compliance requirements and leading practices.
- Bachelor’s degree required. Preferably in Information Security, Risk Management, or a related field.
- 8+ years of experience in compliance, risk management, audit, governance, or information security, including managing compliance programs preferred.
- Experience with one or more frameworks, including SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
- Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor / Implementer preferred.
- Experience with GRC tools (e.g., Optro,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).