Compliance Assurance Lead

Do you combine compliance assurance expertise with the ability to turn control failures, audit findings and regulatory requirements into decisive action? Join our Cyber Resilience & Assurance team and help Cegeka and its customers achieve sustained compliance, stronger audit readiness and transparent risk management. 

• Lead the compliance-assurance cycle for assigned customers, including regulatory applicability, control assessment, evidence readiness, deficiency management and remediation follow-up.
• Apply and continuously improve Cegeka’s multi-compliance framework, common control set, evidence model and testing approach.
• Maintain complete customer-specific views of the central backlog, linking control failures to business impact, accountable owners, mitigation actions, deadlines, status and closure evidence.
• Prepare and lead monthly customer assurance reporting and meetings, highlighting material changes, customer-owned actions, audit readiness, decisions and escalations.
• Challenge Cegeka and customer stakeholders, agree risk-based deadlines and verifiable evidence, and escalate material non-compliance, missed commitments and residual risk through the defined governance path.
• Support ISAE assurance for in-scope customers and coordinate with the Global Compliance Office, auditors, Service Delivery Managers, Control Owners and Technical Owners.
• Protect assurance quality, professional judgement, traceability and appropriate independence between advisory support and assurance.
• Contribute expertise to selected strategic opportunities and develop reusable services, templates, tooling, automation and industry-specific propositions. 

• Substantial experience in information-security assurance, technology risk, compliance or GRC, with end-to-end ownership of findings, evidence validation, stakeholder communication and escalation.
• Strong knowledge of frameworks and standards such as ISO/IEC 27001, NIST CSF, CIS Controls, COBIT and SOC 2, plus practical experience with multi-compliance frameworks and ISAE or comparable service-organisation assurance.
• The ability to interpret control results, assess customer impact and urgency, select the right follow-up route and present clear, defensible conclusions.
• Experience engaging senior customer stakeholders, auditors, regulators or supervisory functions and translating requirements into pragmatic remediation.
• A disciplined consulting mindset, professional scepticism and strong judgement, communication, influence and constructive-challenge skills.
• Experience in regulated industries and multi-country or cross-functional environments is strongly preferred.
• Relevant higher education or equivalent professional experience; certifications such as CISA, CRISC, CISSP, CISM or ISO 27001 Lead Auditor/Lead Implementer are an advantage.
• Excellent written and spoken English; additional languages relevant to assigned markets are an asset.