Compliance, Information Security, and Privacy Specialist

Compliance at C Space is a fast paced, challenging and engaging environment where no two days are the same. We do business with established household names across the globe, and to do that we handle a variety of international laws, regulations, and codes of conduct. You’ll interact with every discipline and client across the business to put Compliance, Information Security, and Privacy first, with a personable manner and can-do attitude. You’ll learn about what it means to be a customer agency in a changing regulatory landscape and will collaborate across global departments and wider disciplines to solve complex and rewarding problems.

We are seeking a dedicated and detail-oriented Compliance, Information Security, and Privacy Specialist. You will be a key member of the Global Compliance team responsible to ensure activities adhere to industry regulations and company policies. You will collaborate closely with other Compliance team members, internal and external stakeholders.

In This Role 

Along with bringing your full self to work, you will support the Global Compliance leads with the everyday running of the business. This involves monitoring, reporting, and assisting in the development of compliance protocols to maintain the highest standards of ethical conduct and data security privacy while prioritizing and performing a wide variety of administrative and technical tasks.

Key Responsibilities

• Risk Assessment: Assist in identifying and assessing compliance risks, and work with applicable stakeholders to address potential compliance issues, including third party management.
• Contract Review: Assist in contracts, agreements, and research proposals to ensure they align with compliance standards and requirements.
• Incident Response: Assist in incident response process in the event of security or data breaches, including investigation, containment, and recovery efforts.   
• Training and Awareness: Assist in developing and delivering compliance training for staff to raise awareness and promote a culture of compliance within the organization.
• Quality Assurance: Assist in regular quality checks on research processes, access controls, and documentation to identify and address potential gaps.
• Audits: Assist in coordinating and participating in internal and external audit to ensure compliance.
• Communication: Build and maintain open lines of communication with various departments to provide compliance guidance and support.
• Regulatory Compliance: Stay up to date with industry regulations and guidelines relevant to market research, such as GDPR, CCPA, PIPL and ESOMAR. Recommend improvements to our compliance positioning.
• Documentation: Maintenance of department’s policies, procedures, and plans.

Desired Skills and Experience

• 0-3 years of experience in an admin or support role
• Some IT knowledge and a passion for compliance, privacy, and security
• Experience in developing, reviewing, and implementing relevant policies and procedures and programs that meet compliance, privacy, and information security requirements
• Knowledge and understanding of relevant regulations and standards such as baseline working knowledge of one or more of the following: GDPR, CCPA, HIPAA, SOX, SOC2 Type II, MA 201 CMR 17, ISO/IEC 27001/2 and NIST (a plus, but not necessary)
• Knowledge of information security processes such as Change Management, SSDLC, DRP, BCP, IRP, SIRT (a plus, but not necessary)
• Excellent analytical skills and demonstrated experience in communicating effectively in written and spoken form to broad internal and external entities
• Keen ability to manage multiple projects under strict timelines, with exceptional attention to detail
• Self-starter and able to work both independently and in a team setting
• A positive attitude, strong work ethic and a focus on creative problem-solving
• Proficiency in MS Office with emphasis on Outlook, Word, and Excel
• NOTE: This role is based in Boston, MA on a hybrid schedule. However, for the right candidate we are open to remote if you are not located in the Boston area (Eastern Time Zone highly preferred). 

Learn more about what makes C Space who WeAre_ here: https://cspace.com/who-we-are/about/ 

We are focused on building a diverse and inclusive business and we welcome applications from people from diverse backgrounds, abilities, and walks of life – talented, creative people with their own voice, ideas and p