Regulatory Risk & Compliance Specialist IV
Eeho Cx · Arlington, Virginia, United States
The Compliance Manager is responsible for developing, implementing, monitoring, and continuously improving the organization’s compliance program. The role ensures that business activities, policies, procedures, and records comply with applicable laws, regulations, contractual obligations, and internal standards.
Key Responsibilities
- Maintain awareness of applicable regulatory requirements and evaluate their impact on the organization.
- Develop, update, and administer compliance policies, procedures, controls, and training materials.
- Assess operational activities, emerging requirements, and proposed business changes for compliance risk.
- Respond to risk and compliance requests and support solutioning sessions to improve operational efficiency and effectiveness within the compliance framework.
- Present evidence, risk implications, options, and recommendations to immediate and related teams; provide input to management decisions and develop relationships with leadership and relevant external peers.
- Conduct periodic compliance risk assessment, develop and maintain risk register, track remediation activities to closure and validate the effectiveness of corrective actions.
- Lead or support internal compliance audits, reviews, and investigations.
- Coordinate responses to regulatory examinations, customer audits, and compliance-related information requests.
- Investigate reported concerns, document findings, and coordinate corrective and preventive actions.
- Deliver compliance training and awareness programs for employees, managers, and relevant third parties.
- Work with Legal, Finance, HR, IT, Security, Operations, and other departments to embed compliance requirements into business processes.
- Lead third-party compliance risk assessments and mitigation workstreams, including risk-based due diligence, verification checks, issue escalation, and ongoing monitoring.
- Exercise independent judgment on moderately complex issues involving multiple variables and potential outcomes. Evaluate alternatives and tradeoffs, recommend a course of action, and escalate matters beyond delegated authority.
- Proactively seek diverse viewpoints and feedback. Mentor junior colleagues, review assigned work for quality, and provide oversight of task execution without assuming formal people management responsibilities.
- Contribute to AI governance assessments and controls, as assigned, by coordinating with business and technical owners on intended uses, risk documentation, oversight, monitoring, and escalation.
- Perform other duties as assigned.
- Advanced knowledge of compliance duties, systems, and procedures, with broad knowledge of at least one compliance or risk specialty and the ability to apply that expertise to business operations.
- Typically 12+ years of relevant experience in compliance, risk management, audit, governance, or a closely related field.
- Demonstrated ability to independently lead moderately complex risk or compliance projects from scoping and analysis through implementation, reporting, and follow-up.
- Hands-on experience assessing risks and controls, developing actionable mitigation plans, maintaining defensible documentation, and validating remediation effectiveness.
- Demonstrated ability to influence stakeholders across related teams or lines of business, explain tradeoffs clearly, and provide evidence-based recommendations to management.
- Experience improving processes, soliciting diverse perspectives, mentoring colleagues, and reviewing work for quality; strong analytical, writing, presentation, and organizational skills.
- Experience working at the intersection of federal and commercial contracting.
- Practical experience supporting AI governance or responsible AI initiatives, such as AI use case intake, risk assessment, third-party AI reviews, governance procedures, human oversight, or monitoring and incident escalation.
- Experience working with technical, privacy, security, legal, and business partners to assess AI risks such as data handling, bias, reliability, transparency, and appropriate human oversight.
Required qualifications
- Advanced knowledge of compliance duties, systems, and procedures, with broad knowledge of at least one compliance or risk specialty and the ability to apply that expertise to business operations.
- Typically 12+ years of relevant experience in compliance, risk management, audit, governance, or a closely related field.
- Demonstrated ability to independently lead moderately complex risk or compliance projects from scoping and analysis through implementation, reporting, and follow-up.
- Hands-on experience assessing risks and controls, developing actionable mitigation plans, maintaining defensible documentation, and validating remediation effectiveness.
- Demonstrated ability to influence stakeholders across related teams or lines of business, explain tradeoffs clearly, and provide evidence-based recommendations to management.
- Experience improving processes, soliciting diverse perspectives, mentoring colleagues, and reviewing work for quality; strong analytical, writing, presentation, and organizational skills.
Preferred qualifications
- Experience working at the intersection of federal and commercial contracting.
- Practical experience supporting AI governance or responsible AI initiatives, such as AI use case intake, risk assessment, third-party AI reviews, governance procedures, human oversight, or monitoring and incident escalation.
- Experience working with technical, privacy, security, legal, and business partners to assess AI risks such as data handling, bias, reliability, transparency, and appropriate human oversight.
Leading contributor individually and as a team member, providing direction and mentoring to others. Work is non-routine and very complex, involving the application of advanced technical/business skills in area of specialization. . Ability to travel. 8 plus years experience. BA/BS or advanced degree preferred. 5-7 years work in governance and compliance for a large corporation. CISA, CISM, CISSP, CIPP and/or, RAC, CQE, CPPS, CQA desired. Strong knowledge of IT and/or quality auditing and controls, preferable with SOX, SSAE 16 - SOC 1 & SOC 2, PCI compliance, NIST, DIACAP, FedRAMP, ISO 27001 & ISO 27002 and/or, ISO 9001, ISO 13485. Experience with 21 CFR Part 11 and HIPAA. Knowledge and understanding of the delivery process for validated systems; specifically Computer System Validation process or CSV. Have an understanding of security and/or quality management system standards and risk management. Experience working in Information Technology, Cloud or managed hosting services. Excellent written and verbal communication skills. Ability to adjust and adapt to changing priorities in a dynamic environment. Technical acumen and the ability to understand and interpret technical specifications. Technical knowledge of Oracle Applications and Database and/or infrastructure components. Project Management skills.