Senior Compliance Specialist

Qnity; Wilmington (DE); On-site; USD 110,000 - 160,000; Full time

Job summary

Qnity is seeking a Senior Compliance Specialist to lead and coordinate its Digital Technology risk and compliance program across SOX, TISAX, CMMC, NIS2, and ISO 27001. You will partner with IT, Legal, Security, Internal Audit, Finance, and operations to ensure obligations are understood, owned, and met across jurisdictions.

You will manage control testing cycles, certifications, and remediation tracking, while driving awareness and training for control owners and stakeholders.

Qualifications

• Bachelor’s degree in Information Security, Risk Management, or related field.
• 8+ years of experience in compliance, risk management, audit, governance, or information security.
• Experience with SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer preferred.
• Experience with GRC tools (e.g., Optro, OneTrust, ServiceNow) preferred.

Responsibilities

• Support day‑to‑day management of the Digital Technology (DT) compliance program, including scope, operating model, and annual plan.
• Plan and manage the compliance calendar, including assessments, certifications, and control testing cycles.
• Define and track program performance indicators and produce compliance status reports for leadership.
• Facilitate governance meetings and track actions to closure; drive awareness and training for control owners.
• Coordinate SOX 404 IT compliance activities for ITGCs, ITACs, and automated controls with Internal/External Audit and IT.
• Map and align controls across frameworks using the Unified Controls Framework to reduce testing and evidence requests.
• Partner with business, IT, Legal, Security, HR, facilities, engineering, and operations to embed compliance in day‑to‑day processes.
• Monitor remediation plans and enforce timely resolution; identify opportunities for process automation.

Skills

Communication

Analytical thinking

Planning

Collaboration

Continuous learning

Education

Bachelor's degree in Information Security/Risk Management

Tools

OneTrust

ServiceNow

Optro

Job description

Are you looking to power the next leap in the exciting world of advanced electronics? Do you want to help solve problems that drive success in the rapidly evolving technology and connectivity landscape? Then bring your problem‑solving, passion, and creativity to help us power the next leap in electronics. At Qnity, we’re more than a global leader in materials and solutions for advanced electronics and high‑tech industries – we’re a tight‑knit team that is motivated by new possibilities, and always up for a challenge. All our dedicated teams contribute to making cutting‑edge technology possible. We value forward‑thinking challengers, boundary‑pushers, and diverse perspectives across all our departments, because we know we play a critical role in the world enabling faster progress for all. Learn how you can start or jumpstart your career with us.

The Senior Compliance Specialist supports the overarching Digital Technology Risk & Compliance program. The role is responsible for planning, governing, and reporting on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001, so that obligations are understood, owned, and met consistently across jurisdictions and business units. The position partners cross‑functionally with business, IT, Legal, Security, Internal Audit, Finance, and operations teams to maintain the compliance obligations inventory, coordinate audits and certifications, track remediation, and provide leadership with clear visibility into Qnity’s compliance posture.

Key Responsibilities

• Compliance Program Management · Support the day‑to‑day management DT compliance program, including program scope, operating model, and the annual compliance plan.
• · Plan and manage the compliance calendar, covering assessments, certifications, and control testing cycles.
• · Define and track program performance indicators and prepare compliance status reporting and dashboards for leadership and governance forums.
• · Facilitate compliance governance meetings and management reviews, tracking decisions and action items to closure.
• · Drive compliance awareness and training for control owners and stakeholders.
• Framework and Regulatory Compliance Oversight · Coordinate SOX 404 IT compliance activities for IT General Controls (ITGCs), IT Application Controls (ITACs), and automated controls, including control testing, evidence collection, deficiency tracking, and remediation, in partnership with Internal Audit, External Audit, Finance, and IT.
• · Plan, govern, and report on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001.
• · Use the Unified Controls Framework to map and rationalize controls across frameworks, reducing duplicate testing and evidence requests.
• Stakeholder Management and Continuous Improvement · Partner with business, IT, Legal, Security, HR, facilities, engineering, and operations teams to embed compliance requirements into day‑to‑day processes.
• · Monitor corrective actions and remediation plans, and enforce time to resolution.
• · Identify opportunities to streamline compliance processes through GRC tools and automation.
• · Provide guidance to control owners and compliance team members on compliance requirements and leading practices.

Education and Experience

• Bachelor’s degree required. Preferably in Information Security, Risk Management, or a related field.
• 8+ years of experience in compliance, risk management, audit, governance, or information security, including managing compliance programs preferred.
• Experience with one or more frameworks, including SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor / Implementer preferred.
• Experience with GRC tools (e.g., Optro, OneTrust, ServiceNow) preferred.

Key Skills/ Competencies

• Communicating with Impact - Expressing thoughts, feelings, and ideas in a clear, succinct, and compelling manner in both individual and group situations.
• Analysis and Judgment – Identifying and understanding issues, problems, and opportunities; using effective approaches for choosing a course of action or developing appropriate solutions
• Planning and Organizing – Establishing clear courses of action, timelines, and priorities to ensure compliance commitments are delivered on time.
• Collaboration and Influence – Working effectively across functions and influencing stakeholders to achieve compliance outcomes without direct authority.
• Continuous Learning – Maintaining current knowledge of evolving regulatory and cybersecurity requirements and applying it to the program.

Key Skills Functional Competencies

• Compliance Program Management – Plans, governs, and reports on a multi‑framework compliance program translating obligations into owned controls, timelines, and measurable outcomes.
• Regulatory and Framework Knowledge – Applies working knowledge of SOX, TISAX, CMMC/NIST SP 800-171, NIS2, and ISO 27001 to assess compliance and drive remediation.
• Audit and Certification Management – Coordinates audits, assessments, and certifications end to end, from planning and evidence collection through findings remediation.

Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page.

Qnity is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability or any other protected class.

If you need a reasonable accommodation to search or apply for a position, please visit our Accessibility Page for Contact Information.