Commercial Compliance Lead
Factory is an AI software-development platform that lets enterprises plan, build, review, test, and ship software with governed autonomous agents (“Droids”).
About Factory
Factory provides a model-independent, enterprise software-development system spanning the SDLC, with deployment options including managed, private, on-premises, and air-gapped environments.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will establish and operate commercial compliance policies, procedures, and monitoring for enterprise transactions. You will review customer compliance obligations, align product and security requirements, manage third-party risk, translate emerging AI and privacy policy into practical guidance, and automate compliance workflows.
Requirements
- 6+ years of experience in regulatory compliance, third-party risk management, or commercial sales operations at an enterprise SaaS, cloud, or B2B technology company
- Knowledge of HIPAA/HITECH, EU DORA, ICT supply chain governance, commercial contracting, DPAs, BAAs, and regulatory schedules
- Experience operationalizing cloud-software compliance frameworks
- Familiarity with SOC 2, ISO 27001 readiness, and compliance automation platforms
- Ability to build a compliance program from scratch
- Ability to communicate regulatory requirements to sales, engineering, legal, and enterprise compliance stakeholders
Responsibilities
- Design, implement, and maintain the enterprise sales compliance program
- Partner with Enterprise Account Executives and Deal Desk through deal closure
- Review security questionnaires, RFPs, RFQs, BAA terms, and contractual risk
- Ensure compliance with HIPAA/HITECH, DORA, and ICT third-party risk frameworks
- Align product roadmaps with enterprise certifications and regulatory requirements
- Administer vendor risk management, subprocessor assessments, compliance monitoring, and audit rights
- Track AI governance and data privacy requirements and translate them into operational guidance
- Automate day-to-day compliance workflows
- Travel regularly to offices
