Technology & Business Solutions, LLC

Compliance

• Develop and maintain the integrated management system covering eight ISO standards: ISO 9001, ISO 14001, ISO 45001, ISO/IEC 20000-1, ISO/IEC 27001, ISO/IEC 27701, ISO 22301, and ISO 37001
• Implement and maintain additional frameworks including TISAX, CSRD, and EcoVadis
• Manage business processes end to end, from identification and design through implementation and monitoring
• Prepare and maintain practical business process documentation
• Develop, review, and update policies, procedures, and internal regulatory documents
• Monitor regulatory changes including the Cybersecurity Act/NIS2, GDPR, and sector-specific legislation, and assess organizational impact
• Conduct compliance checks and gap analyses
• Support communication with regulatory and supervisory bodies
• Identify, assess, and document risks in the risk register
• Develop and implement risk treatment measures
• Report periodically on the organization's risk profile
• Serve as point of contact for certification and supervisory bodies
• Plan and conduct internal, certification, and surveillance audits
• Document nonconformities and track corrective actions
• Support teams during external second- or third-party audits
• Develop and deliver compliance, risk, and internal-control training
• Conduct onboarding and periodic staff training
• Communicate new or changed processes through internal channels
• Partner with process owners across the organization

Risk and Compliance Expert