The position will be responsible for developing, implementing, and overseeing the compliance framework across all EveryData Group entities. It also ensures adherence to applicable credit reporting, data protection, anti-fraud, and regulatory obligations across multiple jurisdictions.
Please note that only applicants that submit their application via our website will be considered. Click the provided link to submit your application via our website:
https://everydata.bamboohr.com/careers/84?source=aWQ9MjY%3D
Responsibilities
1. Governance and Compliance Framework
- Design, implement, and maintain the Group Compliance Management Framework in alignment with local and regional credit reporting and data protection legislation.
- Develop and maintain compliance policies, standards, and procedures applicable across subsidiaries.
- Monitor regulatory changes and ensure timely communication and adaptation of compliance requirements.
- Advise senior management and the board on compliance risks and emerging regulatory developments.
- Coordinate compliance audits and assist with internal/external regulatory reviews.
- Maintain the group’s compliance risk register and report key trends and mitigation strategies to management.
2. Risk and Control Management
- Conduct regular risk assessments of business operations, IT systems, and data-sharing processes.
- Evaluate internal controls and recommend corrective actions to close identified gaps.
- Monitor adherence to risk management, information security, and privacy controls.
- Support Business Continuity, Incident Response, and Data Breach protocols in collaboration with IT and Security teams.
- Coordinate and document the outcomes of root-cause analyses for compliance breaches.
3. Policy, Training, and Awareness
- Develop compliance training programs for management and staff across all territories.
- Drive awareness campaigns on topics such as fair credit reporting, data privacy, anti-bribery, and information security.
- Ensure policy compliance across business units and conduct periodic compliance refresher sessions.
- Maintain records of compliance attestations and training completion for audit readiness.
4. Monitoring, Audit, and Reporting
- Plan and execute compliance audits and testing across functional areas.
- Prepare audit reports and recommend improvements in internal controls and governance.
- Liaise with internal and external auditors and ensure prompt resolution of audit findings.
- Track remediation plans and report progress to the Group COO.
- Provide quarterly compliance dashboards and KPIs for board and management reporting.
5. Regulatory Engagement and Advisory
- Act as the main point of contact for regulators, auditors, and other oversight bodies.
- Review and advise on the compliance aspects of new products, partnerships, and vendor contracts.
- Ensure that the organization’s practices meet obligations under credit reporting, data protection, and consumer protection laws.
- Support the development of group-wide procedures for responding to regulatory inquiries and data subject requests.
Responsibilities
Qualifications, Knowledge, and experience
- Bachelor’s degree in Information Technology, Business, Information Security, or a related field.
- Professional certification such as CISA, CISM, or Compliance and Ethics Professional (CCEP) is preferred.
- Minimum 3-5 years’ proven experience in Compliance, Risk Management, or Internal Audit within the financial services or data-driven industry.
- Demonstrated understanding of credit bureau operations, data protection, and IT governance.
- Proven experience in conducting audits, developing compliance frameworks, and managing regulatory relationships.
- Strong knowledge of relevant laws and regulations including the Credit Reporting Acts and Data Protection Acts across the Caribbean.
- Excellent report writing, analytical, and communication skills.
- Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint, Visio) and familiarity with GRC tools.
Technical Competencies
- Analytical Thinking: Evaluates complex data and identifies patterns and risks.
- Communication: Translates technical and regulatory concepts for diverse audiences.
- Planning and Organization: Prioritizes work to meet regulatory and audit timelines.
- Collaboration: Builds strong cross-functional partnerships with IT, HR, Legal, and Operations
- Problem Solving: Develops and implements effective compliance solutions.
- Integrity and Ethics: Demonstrates professional independence and confidentiality.