Compliance Manager

Role Overview

Blue Voice is seeking a Compliance Officer to manage the company’s compliance program, security/legal coordination, and documentation processes. This is a hands-on role working cross-functionally with Engineering, Operations, Sales, Customer Success, outside vendors, and legal counsel to ensure requirements are understood, documented, assigned, and completed.

Responsibilities

Compliance Program Management

• Own and maintain the compliance roadmap, policies, documentation, evidence, deadlines, and remediation plans.
• Coordinate internal/external compliance reviews, assessments, and audits.
• Track applicable security, privacy, contractual, and operational requirements.
• Maintain a centralized system for requirements, owners, evidence, risks, and open action items.
• Identify gaps and drive solutions with internal teams.
• Provide regular updates to company leadership on priorities, risks, and progress.

Engineering and Infrastructure Coordination

• Translate compliance/security requirements into clear engineering and infrastructure tasks.
• Collaborate on controls for access, authentication, encryption, logging, monitoring, data handling, retention, vulnerability management, and incident response.
• Coordinate with DevOps and other vendors on infrastructure/security/compliance work.
• Track technical remediation and confirm completion with documentation.
• Participate in product/infrastructure discussions to identify compliance concerns.
• Help establish repeatable processes as the company scales.

Customer and Business Support

• Respond to customer security questionnaires, compliance inquiries, due-diligence requests, and documentation requests.
• Draft accurate responses covering security, privacy, infrastructure, and data-handling practices.
• Support Sales/Customer Success during procurement, contracting, and renewal.
• Maintain a library of approved materials (responses, policies, diagrams, documentation).
• Ensure responses are accurate and appropriately reviewed; escalate for technical/legal/executive input.

Legal and Records Coordination

• Coordinate with outside counsel on compliance, privacy, contractual, and records-related matters.
• Receive, track, review, and respond to formal information/records requests.
• Ensure sensitive/confidential and security-related information is reviewed before disclosure.
• Maintain records of requests, approvals, deadlines, decisions, and final responses.
• Support contract review (security addenda, data-processing terms, vendor agreements) and determine when legal/leadership involvement is needed.

Policies, Training, and Internal Operations

• Draft/update and maintain security, privacy, incident response, acceptable-use, access-control, vendor-management, and operational policies.
• Coordinate employee training, policy acknowledgments, access reviews, and internal certifications.
• Support vendor security and risk-review processes.
• Assist with incident-related operations (cut off in provided text).