Senior Compliance Specialist

Qnity Electronics, Inc.; Wilmington (DE); Sur place; USD 120 000 - 170 000; Plein temps

Résumé du poste

Qnity Electronics, Inc.在美国特拉华州威明顿地区寻求经验丰富的高级合规专员。该职位将主导数字技术风险与合规项目，覆盖SOX、TISAX、CMMC、NIS2、ISO 27001等框架，确保跨司法辖区的义务被理解、拥有并得到一致执行。

您将与业务、IT、法务、安全、内部审计、财务及运营团队协作，维护合规清单、协调审计与认证、跟踪整改，并向领导层提供清晰的合规态势可视化。

Qualifications

• 需要本科学位，信息安全、风险管理或相关领域优先。
• 具备8年以上合规、风险管理、审计、治理或信息安全相关经验，具备领导合规项目经验者优先。
• 具备SOX、TISAX、CMMC、ISO 27001、NIS2或GDPR等框架中的一种或多种经验。
• 具备CISA、CRISC、CISSP或ISO 27001 Lead Auditor/Implementer等认证者优先。
• 熟悉GRC工具（如Optro、OneTrust、ServiceNow）者优先。

Responsabilités

• 支持DT合规计划的日常管理工作，包括计划范围、运营模式和年度合规计划。
• 计划并管理合规日历，覆盖评估、认证和控制测试周期。
• 定义并跟踪计划绩效指标，编制合规状态报告及仪表板供领导与治理论坛使用。
• 促进合规治理会议及管理评审，跟踪决策与行动项直至关闭。
• 推动对控制所有者和相关利益相关者的合规意识培训。

Connaissances

Communicating impact

Analysis and Judgment

Planning and Organizing

Collaboration and Influence

Continuous Learning

Formation

Bachelor’s degree in Information Security / Risk Management

Outils

Optro

OneTrust

ServiceNow

Description du poste

您是否渴望助力激动人心的先进电子领域的下一次飞跃？您是否希望跟我们一起解决难题， 共同推动电子技术和互联科技的快速发展？那么，带着您的解决问题的能力、热情和创造力，与我们一起推动电子领域的下一次飞跃。

在启诺迪，我们不仅是先进电子和高科技领域材料及解决方案的全球领导者，更是一个紧密团结、充满激情、勇于挑战的团队。我们所有敬业的团队都致力于将尖端技术变为现实。我们重视具有前瞻性思维的挑战者、突破界限的开拓者以及各个部门的多元化视角，因为我们深知，我们在推动世界进步、造福全人类方面扮演着至关重要的角色。了解如何加入我们，开启或加速您的职业生涯。

The Senior Compliance Specialist supports the overarching Digital Technology Risk & Compliance program. The role is responsible for planning, governing, and reporting on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001, so that obligations are understood, owned, and met consistently across jurisdictions and business units.

The position partners cross-functionally with business, IT, Legal, Security, Internal Audit, Finance, and operations teams to maintain the compliance obligations inventory, coordinate audits and certifications, track remediation, and provide leadership with clear visibility into Qnity’s compliance posture.

KEY RESPONSIBILITIES

Compliance Program Management

• Support the day-to-day management DT compliance program, including program scope, operating model, and the annual compliance plan.
• Plan and manage the compliance calendar, covering assessments, certifications, and control testing cycles.
• Define and track program performance indicators and prepare compliance status reporting and dashboards for leadership and governance forums.
• Facilitate compliance governance meetings and management reviews, tracking decisions and action items to closure.
• Drive compliance awareness and training for control owners and stakeholders.

Framework and Regulatory Compliance Oversight

• Coordinate SOX 404 IT compliance activities for IT General Controls (ITGCs), IT Application Controls (ITACs), and automated controls, including control testing, evidence collection, deficiency tracking, and remediation, in partnership with Internal Audit, External Audit, Finance, and IT.
• Plan, govern, and report on compliance across regulatory, certification, including SOX, TISAX, CMMC, NIS2, and ISO 27001
• Use the Unified Controls Framework to map and rationalize controls across frameworks, reducing duplicate testing and evidence requests.

Stakeholder Management and Continuous Improvement

• Partner with business, IT, Legal, Security, HR, facilities, engineering, and operations teams to embed compliance requirements into day-to-day processes.
• Monitor corrective actions and remediation plans, and escalation overdue or high-risk items to leadership.
• Identify opportunities to streamline compliance processes through GRC tools and automation.
• Provide guidance to control owners and compliance team members on compliance requirements and leading practices.

EDUCATION AND EXPERIENCE

• Bachelor’s degree required. Preferably in Information Security, Risk Management, or a related field.
• 8+ years of experience in compliance, risk management, audit, governance, or information security, including managing compliance programs preferred.
• Experience with one or more frameworks, including SOX, TISAX, CMMC, ISO 27001, NIS2, or GDPR.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer preferred.
• Experience with GRC tools (e.g., Optro, OneTrust, ServiceNow) preferred.

KEY SKILLS/ COMPETENCIES

• Communicating with Impact - Expressing thoughts, feelings, and ideas in a clear, succinct, and compelling manner in both individual and group situations.
• Analysis and Judgment - Identifying and understanding issues, problems, and opportunities; using effective approaches for choosing a course of action or developing appropriate solutions
• Planning and Organizing - Establishing clear courses of action, timelines, and priorities to ensure compliance commitments are delivered on time.
• Collaboration and Influence - Working effectively across functions and influencing stakeholders to achieve compliance outcomes without direct authority.
• Continuous Learning - Maintaining current knowledge of evolving regulatory and cybersecurity requirements and applying it to the program.

KEY SKILLS FUNCTIONAL COMPETENCIES

• Compliance Program Management - Plans, governs, and reports on a multi-framework compliance program, translating obligations into owned controls, timelines, and measurable outcomes.
• Regulatory and Framework Knowledge - Applies working knowledge of SOX, TISAX, CMMC/NIST SP 800-171, NIS2, and ISO 27001 to assess compliance and drive remediation.
• Audit and Certification Management - Coordinates audits, assessments, and certifications end to end, from planning and evidence collection through findings remediation.

加入我们的人才社区 并与我们保持联系！

Qnity是一家推崇机会均等的公司。我们对符合条件的求职者一视同仁，不会因其种族、肤色、宗教、信条、性别、性取向、性别认同、婚姻状况、国籍、年龄、退伍军人身份、残疾或或属于任何其他受保护阶层而区别对待。如果您需要借助合理的便利条件来搜索或申请职位，请访问我们的无障碍功能页面获取联系信息。

Qnity提供全面的薪资和福利方案。要了解更多，请访问薪酬和福利页面

我們使用人工智慧（AI）來增強我們的招聘流程。