Compliance Manager

At Instructure, we believe in the power of people to grow and succeed throughout their lives. Our goal is to amplify that power by creating intuitive products that simplify learning and personal development, facilitate meaningful relationships, and inspire people to go further in their education and careers. We do this by giving smart, creative, passionate people opportunities to create awesome.

And That's Where You Come In
We are seeking an experienced and proactive
Compliance Manager
to lead and mature our
Governance, Risk, and Compliance (GRC)
program. This role plays a critical part in developing and maintaining the compliance framework, ensuring adherence to regulatory requirements, and managing risk across the organization. The ideal candidate will have deep knowledge of industry regulations, risk management practices, and GRC technologies, and a proven ability to lead cross-functional initiatives.

What You'll Do

• GOVERNANCE:
• Develop, implement, and maintain corporate compliance policies, standards, and procedures.
• Lead internal compliance governance initiatives, including regular committee meetings and reporting to senior leadership.
• Monitor regulatory developments and assess their impact on the organization.
• RISK MANAGEMENT:
• Support enterprise risk management (ERM) framework, ensuring risks are identified, assessed, mitigated, and monitored.
• Work with business units to implement controls and risk mitigation strategies.
• Conduct periodic risk and internal assessments and present findings to executive stakeholders.
• Ensure appropriate documentation and reporting of risk and compliance issues, including compliance audits and risk assessments.
• Foster a culture of risk awareness and compliance throughout the organization by encouraging proactive risk management practices at all levels.
• COMPLIANCE PROGRAM:
• Oversee compliance with applicable laws, regulations, and internal policies (e.g., GDPR, ISO 27001, and PCI-DSS).
• Manage internal and external audits, regulatory examinations, and third-party assessments.
• Collaborate with Legal, Security, IT, and other departments to ensure consistent compliance posture.
• Track and monitor compliance issues and findings and ensure compliance to requirements across the company
• TRAINING AND AWARENESS:
• Provide guidance, training, and development opportunities to build expertise within the team.
• Develop and deliver compliance training programs to promote awareness and understanding across the organization.
• Cultivate a culture of compliance through ongoing education and communication.
• GRC TECHNOLOGY AND REPORTING:
• Lead the implementation and management of GRC tools/platforms.
• Generate regular dashboards and reports on compliance and risk metrics for senior leadership and the board.
• Maintain documentation and evidence to support audit readiness and reporting.

What You Will Need To Know/have

• Bachelor's degree in information systems, business, cybersecurity or related field
• 5+ years of experience in cybersecurity and privacy compliance, risk management or internal audit
• Experience with regulatory frameworks such as SOC 2, ISO 27001, PCI DSS, NIST or other industry-specific regulations,
• Knowledge of privacy (GDPR) requirements is a plus.
• Strong analytical and problem-solving abilities, attention to detail, excellent communication and interpersonal skills, ability to work independently and as part of a team.
• Proven leadership in managing cross-functional compliance or risk programs.
• Experience with risk management tools, compliance monitoring systems, and data analytics.
• Ability to effectively engage with senior leadership and other key stakeholders.
• Proven ability to manage multiple priorities and work in a fast-paced environment.
• Proficiency in Google Suite and Microsoft Office Suite. Experience with GRC tools (e.g., Archer, ServiceNow GRC, LogicGate, RiskCloud, MetricStream).
• Professional certifications such as CISSP, CRCM, CCEP, CISA, CRISC, or similar.
• Please note that, while we offer flexible work arrangements, though the preferred hours for this role are 11:00 AM to 7:00 PM to enable close collaboration with our U.S. team while covering the European time zone too

Get in on all the awesome at Instructure

• We offer competitive, meaningful benefits in every country where we operate. While they vary by location, here's a general idea of what you can expect:
• Competitive compensation, plus all full-time employees participate in our ownership program - because everyone should have a stake in our success.
• Flexible schedules and a remote-friendly culture, with hybrid or onsite work options available in some regions for specific roles
• Generous time off, including local holidays and our annual company-wide "Dim the Lights" week in late December, when we encourage everyone to step back and recharge
• Comprehensive wellness programs and mental health support
• Annual learning and development stipends to support your growth
• The technology and tools you need to do your best work — typically a Mac, with PC options available in some locations
• Motivosity employee recognition program
• A culture rooted in inclusivity, support, and meaningful connection

We believe in hiring great people and treating them right. The more diverse we are, the better our ideas and outcomes.

Instructure is an Equal Opportunity Employer. We comply with applicable employment and anti-discrimination laws in every country where we operate.

All employees must pass a background check as part of the hiring process. To help protect our teams and systems, we've implemented identity verification measures. Candidates may be asked to verify their legal name, current physical location, and provide a valid contact number and residential address, in accordance with local data privacy laws.

Any attempt to misrepresent personal or professional information will result in disqualification.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.