Risk & Compliance Analyst
Cubic Telecom
The Company
Founded in 2009, Cubic Telecom has grown to become one of the leading providers of connectivity solutions and analytics services that help vehicle and IoT device manufacturers manage and grow revenue streams. Fast paced, smart, ambitious, and continually seeking new, ideas. That’s us, is it you? At Cubic you will find an environment filled with energy and collaboration, where we set out every day to improve not just the world, but ourselves and each other.
We believe in leadership that supports empowerment and responsibility, while recognising and developing leadership qualities across Our Team. Together we bring out the best in each other. So, whether you’re interested in joining us as an individual contributor, manager, senior leader – or someone who aspires to growing into a leadership role – we look for people who are results focused, empathetic, visionary, empowering, and who ‘champion’ our cultures and values.
The Role
We are seeking a Risk and Compliance Analyst who thrives on working in a fast-paced, highly flexible environment. This role will report directly to the Head of IT & Security and will play a key role in supporting the development and implementation of risk management and compliance strategies. The successful candidate will help ensure the security, integrity, and compliance of our company's data, core network, and platform while contributing to the overall IT and security objectives.
Key Responsibilities:
- Lead efforts to achieve regulatory and contractual industry certifications (e.g., ISO 27001, NIS2, SOC 2, TISAX, GDPR, etc.) by coordinating cross-functional teams and ensuring compliance with required standards.
- Maintain existing certifications by conducting regular reviews, updates, and audits to ensure ongoing compliance with certification requirements.
- Act as the primary point of contact for third-party auditors, ensuring all required documentation, evidence, and processes are prepared and available
- Coordinate and manage the end-to-end audit process, including scheduling, facilitating meetings, and addressing auditor queries
- Develop, review, and update internal policies, procedures, and controls to align with certification requirements and industry best practices.
- Ensure that all employees are aware of and adhere to compliance policies through training and communication initiatives.
- Conduct regular risk assessments to identify potential compliance gaps or vulnerabilities in systems, processes, or controls.
- Work closely with IT, Security, Legal, and other departments to ensure alignment on compliance objectives and initiatives.
- Assess and monitor third-party vendors for compliance with security and regulatory requirements.