[Hiring] Commercial Compliance Lead @Factory

Role Description

Factory is looking for a Commercial Compliance Lead to build and run our commercial compliance program from the ground up. As we sell to some of the most regulated enterprises in the world, you will ensure every enterprise deal meets its regulatory, security, and contractual requirements while keeping deals moving.

• Build Factory’s Commercial Compliance Architecture: Design, implement, and maintain the enterprise sales compliance program, establishing policies, standard operating procedures, and monitoring mechanisms.
• Accelerate Factory’s Enterprise Transactions: Partner directly with Enterprise Account Executives and Deal Desk from opportunity qualification through deal closure.
• Meet Statutory and Regulatory Standards: Ensure comprehensive compliance with HIPAA/HITECH, Digital Operational Resilience Act (DORA), and ICT third-party risk management frameworks.
• Bridge Factory’s Product, Security, and Commercial Standards: Align the product roadmap with enterprise certifications and regulatory requirements.
• Govern Third-Party & Supply Chain Risk: Administer the company-wide vendor risk management program.
• Monitor Emerging Commercial AI Policy: Track global AI governance directives and translate evolving policy into actionable operational guidance.
• Build Compliance Agents and Workflows: Automate day-to-day compliance work to leverage strategic insights.

Qualifications

• Commercial Enterprise Expertise: 6+ years of hands-on experience in regulatory compliance, third-party risk management (TPRM), or commercial sales operations.
• Mastery of Commercial Regulations: Deep working knowledge of HIPAA/HITECH, EU DORA, ICT supply chain governance, and commercial contracting practices.
• Cloud & AI Compliance Literacy: Proven track record operationalizing compliance frameworks for cloud software.
• A Builder Mindset: Excited to build a compliance program from scratch and proactive about finding scalable solutions.
• Crisp Cross-Functional Communication: Exceptional ability to synthesize dense regulatory requirements into clear guidance.
• Professional Credentials: Holding active industry governance and privacy certifications such as CIPP/US, CIPP/E, CRISC, CISA, or HCISPP is highly preferred.

Requirements

• Location: Remote (US), with regular travel to Factory offices required.