We are looking for a Group Compliance Officer to lead cybersecurity and infrastructure compliance across our global entities, Labrador Partners Holdings, Labrador US, and Labrador France.
This role is perfect for someone who can bridge technical teams and client-facing compliance, ensuring we meet global standards while building trust with clients.
What You’ll Do
Own Client Security & Compliance Requests
Manage and respond to client security questionnaires and due diligence requests
- Build and maintain a central library of approved responses and evidence.
- Ensure answers are accurate, consistent, and audit-ready.
- Collaborate with internal teams and client stakeholders.
Drive Compliance Across Frameworks
- Work with standards like SOC 2, ISO 27001, GDPR, DORA, and NIS2.
- Map controls so one solution meets multiple requirements.
- Keep compliance documentation aligned and up to date.
Be the Technical Compliance Bridge
- Understand key security tools (IAM, SIEM, SOC, vulnerability management, etc.)
- Review technical inputs and translate them into client-friendly language.
- Validate evidence (logs, reports, audits) before sharing externally.
Support Strategic Programs
- Cerberus (Security Program): Help prepare for SOC 2 Type II and audits.
- Lethe (Infrastructure Program): Support resilience, cloud, and compliance readiness.
- Turn technical improvements into clear, client-facing assurance.
Governance & Reporting
- Maintain key records (policies, risk registers, audit evidence).
- Report compliance status, risks, and progress to leadership.
What We’re Looking For
Experience:
- 5–8+ years in IT security compliance, GRC, or similar roles.
- Strong experience handling client questionnaires and audits.
- Knowledge of SOC 2, ISO 27001, GDPR (must-have).
Technical Understanding:
- Familiar with cybersecurity tools and concepts (IAM, SIEM, endpoint security, cloud).
- Understanding of cloud and infrastructure resilience (AWS, DR, backups).
Bonus Points:
- Experience with DORA, NIS2, SecNumCloud, or AI regulations.
- Certifications like CISA, CISSP, ISO 27001.
- Experience in financial services or regulated industries.
- Fluent in English and French
What Success Looks Like
- Faster, more consistent responses to client security requests.
- A strong, audit-ready compliance framework across all entities.
- Successful support for SOC 2 and ISO audits.
- Improved alignment between security, infrastructure, and compliance.
