The Compliance Lead ensures secure operations of systems and compliance with laws, conducts audits, and implements security policies. They lead design and review of security controls, provide expert guidance, and promote security awareness within teams.
Company Description
Description:
The Data Compliance Lead’s role is to ensure the secure operation of the in-house systems, servers, and network connections in accordance with internal processes, procedures, and compliance requirements as well as Federal, State and Local laws. Tasks also includes conducting regularly scheduled audits on internal systems and hosting third-party and/or Cloud audits as required in order to maintain certifications and compliance certificates. The data compliance lead also develops implements, maintains, and oversees remediation and enforcement of internal security policies and procedures.
Top 3 Must Have Skills:
Data Compliance Lead is responsible for designing, publishing and reviewing technology designs, security controls and solutions to reduce the risk of unauthorized access, transmission and storage of confidential Ex: IRS 1075, IRS Pub 1075, TOP, SSA, DHS, and PII and FTI data.Partner with security architects, other functional-area architecture, engineering, and security specialists to ensure adequate security solutions and controls are in place throughout the IT systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirementsProvide expert-level guidance to security analysts, testers, and development teams during application security assessments. Must be able to identify, re-create, and remediate security defects
Other Desired SkillsAdditional Information
Direct Client
Job DescriptionTitle:
Compliance Lead
Duration: 8+ months
Location: Denver, CO
Description:
The Data Compliance Lead’s role is to ensure the secure operation of the in-house systems, servers, and network connections in accordance with internal processes, procedures, and compliance requirements as well as Federal, State and Local laws. Tasks also includes conducting regularly scheduled audits on internal systems and hosting third-party and/or Cloud audits as required in order to maintain certifications and compliance certificates. The data compliance lead also develops implements, maintains, and oversees remediation and enforcement of internal security policies and procedures.
Top 3 Must Have Skills:
Data Compliance Lead is responsible for designing, publishing and reviewing technology designs, security controls and solutions to reduce the risk of unauthorized access, transmission and storage of confidential Ex: IRS 1075, IRS Pub 1075, TOP, SSA, DHS, and PII and FTI data.Partner with security architects, other functional-area architecture, engineering, and security specialists to ensure adequate security solutions and controls are in place throughout the IT systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirementsProvide expert-level guidance to security analysts, testers, and development teams during application security assessments. Must be able to identify, re-create, and remediate security defects
Other Desired Skills
- As and an expert/lead technical will define the information security architecture and design for the application.
- Providing training for development and QA teams on how to implement Secure Software Development Life Cycle S-SDLC into their existing practices
- In-depth knowledge on common web application security flaws and secure coding practices and the ability to clearly explain security issues to project and development staff
- Ability to prioritize and track security issues and work with the necessary teams to ensure remediation
- Serve as a leader by promoting security awareness, mentoring other team members, and staying up-to-date on current development methodologies (Agile/DevOps)
- Understand HTTP, REST, SOAP, XML and JSON as it relates to APIs and AJAX, Experience using and compliance testing REST and/or SOAP APIs
- Understanding of AWS, Azure, and other cloud solutions, security issues and Security controls in those environments
- 7+ years in Information Security space
- 5+ years in enterprise software development
- Strong development background with prominent web or mobile development languages and frameworks, provide security remediation advice to development and testing teams;
- Strong experience with Threat Modeling in an enterprise, not just theoretical
- Strong oral, written, and presentation abilities -able to convey risk to all levels of the business, from C-level executives to operations and development teams
- Strong understanding of web applications and architectures, relational and non-relational databases, and hardware architectures, and effectively applying the principles of information security to IT environments
- Strong experience working in a multi-platform, multi-protocol, distributed enterprise computing environment
- Experience with Unix/Linux and Windows system administration
- Some understanding of governance frameworks such as ITIL and ISO 27001;
- Some project management experience: Able to assess needs, define objectives, identify resources needed to achieve objectives and begin implementation towards goal completion;
- Must be able to work effectively alone and as part of a larger project team.
- Current understanding of Industry trends and emerging threats
All your information will be kept confidential according to EEO guidelines.
Similar Jobs
Aerospace • Security
Leads airport aviation-security quality assurance activities at Denver International Airport. Supervises QA personnel, schedules and conducts overt and covert assessments, monitors compliance with TSA regulations and procedures, analyzes performance trends, performs root-cause analysis, recommends corrective actions, prepares reports, and coaches Security Officers. Requires flexible shift availability, physical mobility throughout airport facilities, and the ability to maintain required airport credentials and security licenses.
.png)
Consumer Web • eCommerce • Marketing Tech • Retail • Software • Analytics • Generative AI
Owns security trust and compliance programs, audits, policies, control design, continuous monitoring, evidence pipelines, and security automation. Leads framework implementations, identifies risks, manages auditor relationships, develops control health metrics, and mentors practitioners without direct authority. The role requires deep knowledge of security and privacy frameworks, GRC engineering, cloud infrastructure, SaaS environments, identity governance, and modern security practices.
Top Skills:
AnecdotesAWSCcpaCis Critical Security ControlsConftestCpraCsa StarDrataGdprHipaaHyperproofIso 27001Iso 27002Iso 27017Iso 27018Iso 27701Iso 42001KubernetesMcpNist Ai RmfNist CsfOpa/RegoPciPythonRest ApisSoc 1Soc 2Sox ItgcsSQLTerraformVanta
Energy • Manufacturing • Solar • Renewable Energy
Lead technical compliance for industrial controls projects and new product introductions, particularly nuclear applications. Interpret global and nuclear-specific standards, develop compliance plans, secure certifications, coordinate with engineering, manufacturing, customers, and regulatory agencies, and oversee documentation, inspections, audits, quality, cost, and schedules. The role also drives lean improvement, product cost reduction, safety, and PLM adoption.
Top Skills:
CeCsaEmcEu DirectivesEx2100EGe MarkHmi/Nw HwIecIndustrial Control SystemsIso 9001Lean Six SigmaLs2100ENqa-1Nrc 1.180PlmUl
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
