Compliance Officer - IFS Colombo

Compliance Officer - IFS

Job Description:

• As a Compliance Officer, you will be responsible for ensuring that IFS complies with the relevant company and global security and data protection policies and controls as they relate to IFS. 
• Based in Sri Lanka, you will form part of the Certification & Compliance function within the Global Security team and will support with the maintenance and improvement of existing certification programmes based on globally recognised management system standards (e.g. ISO 27001, SOC 2, NIST-171). 
• The Certification & Compliance function is managed from the UK and primarily covers Global Cloud Service Operations, and supporting corporate functions, operating from locations in Sri Lanka.
• You will report to the Security Compliance Manager within IT and work closely with the Director of Certification & Compliance, the IFS Global Privacy Officer, IT Cyber Security Team, Unified Support Operations teams, Legal, Governance, Risk & Compliance (GRC) function, and other business users/stakeholders.

Key Responsibilities:

• Conduct audits and inspections to ensure that security controls are in compliance with the defined internal policies and procedures, and are performed in accordance with a defined measurement framework. 
• Report on audit results and compliance adherence to key stakeholders (Security, Service Management, Data Protection, Senior Management). 
• Ensure that internal audit activities are aligned with best practices, industry standards and broader IFS policies (e.g. security, Data protection, etc.) 
• Build strong cross-functional relationships with security control owners to ensure that certification-based control activities are taking place and are evidencable. 
• Promote a culture of data protection and compliance within the user and stakeholder community. 
• Provide general advice and support to staff and stakeholders on compliance matters, including compliance risk mitigation and remediation etc. 
• Keep abreast of the latest developments and trends in security control governance and apply and communicate any changes or implications relating to governance policies, processes and guidelines to the relevant users and stakeholders. 
• Work closely with other IFS governance functions to ensure that security control governance is a seamless and fully integrated part of the overall IFS governance framework.

Qualifications:

To be successful in this role, you will need to demonstrate the following competencies:

• A relevant degree or equivalent experience in implementing, maintaining and auditing management system standards, or related fields 
• Ability to conduct audits and assessments of security controls and identify any compliance risks or gaps. 
• Skill in preparing and presenting audit reports and recommendations to stakeholders and management. 
• Internal auditor experience/qualifications, or other relevant security compliance education or qualifications 
• Familiarity with data protection laws and regulations, such as GDPR, CCPA and their implications for BI services. 
• High attention to detail and accuracy, and the ability to handle confidential and sensitive data. 
• Adaptability and flexibility, and the ability to keep up with changing data and compliance trends and standards. 
• Excellent communication and interpersonal skills, and the ability to collaborate with cross-functional teams and external partners.
• Experience in reporting and presenting to, and discussing information with stakeholders 
• Use of workflow/reporting systems (e.g. Service Now, Jira, etc.)

Additional Information:

• We embrace flexibility and hybrid work opportunities to support diverse needs and lifestyles, while also valuing inclusive workplace experiences. 
• By fostering a sense of community, we drive innovation, strengthen connections, and nurture belonging. 
• Our commitment ensures you can work in a way that suits you best, while also engaging with colleagues to share ideas and build meaningful relationships.