• Strong knowledge of industry compliance requirements and standards
• Good understanding of SaaS Business
• Good understanding of Governance, Risk, and Compliance in IT environment
• Outstanding communication and interpersonal abilities
• Previous experience as a compliance analyst, compliance officer, compliance manager, or similar position in a related field
• Advanced analytical abilities
• Effective research skills
• Experience with ISO and other security standards
• Experience of building strong working relationships and demonstrating strong stakeholder management skills with a variety of stakeholders across divisions and territories at all levels of the business

Desirable

• Taking a disciplined approach to the daily, weekly, monthly and annual tasks defined by ISO, SOC and ourselves
• Taking a creative approach to embedding processes into the way the business works
• Bringing gravity to the processes, procedure and policies and keeping them in the minds of Tyk employees
• Ensuring we are audit ready
• Continually improving how we approach both the management of quality and security
• Continually improving the layout, structure and documentation of the system
• Continually streamlining our management system to keep it simple but not simpler than it needs to be – cutting out bureaucracy without losing comprehensiveness
• Perform periodic internal audits on company procedures and processes and report on the organization’s compliance (to quality, information security and business continuity standards)
• Identify, analyze, and resolve compliance issues
• Ensure that all policies and standards are regularly reviewed and up-to-date
• Keep the company’s process mapping and responsibilities structure chart up to date
• Develop and update existing compliance policies and related documentation
• Proactively research to stay up-to-date with regulations and rules
• Communicate regulations to internal and external parties
• Assist with management review preparation
• Take ownership for ad-hoc compliance queries from the business, suppliers and customers escalating where needed
• Provides governance for data classification, segregation of duties and system access controls in line with central IT policies
• Collect, record, review and close nonconformances relating to audit findings and process issues
• Oversee management system and information security awareness training
• Commercially minded together with compliance oriented - able to find balance between security & allowing teams to maintain their dynamic approach to work