Compliance Officer

We are looking for a Group Compliance Officer to lead cybersecurity and infrastructure compliance across our global entities—Labrador Partners Holdings, Labrador US, and Labrador France.

This role is perfect for someone who can bridge technical teams and client- facing compliance, ensuring we meet global standards while building trust with clients.

Own Client Security & Compliance Requests

• Manage and respond to client security questionnaires and due diligence requests
  
• Build and maintain a central library of approved responses and evidence
  
• Ensure answers are accurate, consistent, and audit-ready
  
• Collaborate with internal teams and client stakeholders
  

Drive Compliance Across Frameworks

• Work with standards like SOC 2, ISO 27001, GDPR, DORA, and NIS2
  
• Map controls so one solution meets multiple requirements
  
• Keep compliance documentation aligned and up to date
  
  

Be the Technical Compliance Bridge

• Understand key security tools (IAM, SIEM, SOC, vulnerability management, etc.)
  
• Review technical inputs and translate them into client-friendly language
  
• Validate evidence (logs, reports, audits) before sharing externally
  

Support Strategic Programs

• Cerberus (Security Program): Help prepare for SOC 2 Type II and audits
  
• Lethe (Infrastructure Program): Support resilience, cloud, and compliance readiness
  
• Turn technical improvements into clear, client-facing assurance
  

Governance & Reporting

• Maintain key records (policies, risk registers, audit evidence)
  
• Report compliance status, risks, and progress to leadership
  

What We’re Looking For

Experience:

• 5–8+ years in IT security compliance, GRC, or similar roles
  
• Strong experience handling client questionnaires and audits
  
• Knowledge of SOC 2, ISO 27001, GDPR (must-have)
  

Technical Understanding:

• Familiar with cybersecurity tools and concepts (IAM, SIEM, endpoint security, cloud)
  
• Understanding of cloud and infrastructure resilience (AWS, DR, backups)
  

Bonus Points:

• Experience with DORA, NIS2, SecNumCloud, or AI regulations
  
• Certifications like CISA, CISSP, ISO 27001
  
• Experience in financial services or regulated industries
  
• Fluent in English and French
  

What Success Looks Like

• Faster, more consistent responses to client security requests
  
• A strong, audit-ready compliance framework across all entities
  
• Successful support for SOC 2 and ISO audits
  
• Improved alignment between security, infrastructure, and compliance