Commercial Compliance Lead at Factory · LumiJobs

Responsibilities

Factory is looking for a Commercial Compliance Lead to build and run our commercial compliance program from the ground up. As we sell to some of the most regulated enterprises in the world, across healthcare, financial services, insurance, and automotive, you will make sure every enterprise deal meets its regulatory, security, and contractual requirements while keeping deals moving. You will partner closely with our Enterprise sales team, Deal Desk, Legal, Engineering, and Security, and work alongside our Federal Compliance Lead, who owns public sector compliance. You will own the policies, processes, and guidance that let Factory sell to regulated industries with confidence. This is an individual contributor role on the Legal team.
Build Factory’s Commercial Compliance Architecture: Design, implement, and maintain the enterprise sales compliance program from the ground up, establishing policies, standard operating procedures, and monitoring mechanisms for deals in highly regulated industries like healthcare and finance.
Accelerate Factory’s Enterprise Transactions: Partner directly with Enterprise Account Executives and Deal Desk from opportunity qualification through deal closure. Review customer security questionnaires (CAIQ, SIG), RFPs, and RFQs for compliance obligations, Business Associate Agreement (BAA) terms, and contractual risk.
Meet Statutory and Regulatory Standards: Ensure comprehensive compliance with HIPAA/HITECH for healthcare verticals, the Digital Operational Resilience Act (DORA) for financial sectors, and overarching Information and Communication Technology (ICT) third-party risk management frameworks.
Bridge Factory’s Product, Security, and Commercial Standards: Partner closely with Engineering and Security to align the product roadmap with enterprise certifications and regulatory requirements, including SOC 2 Type II, ISO/IEC 27001, NIST CSF, and DORA's technical resilience and incident reporting mandates.
Govern Third-Party & Supply Chain Risk: Administer the company-wide vendor risk management program, managing ICT sub-outsourcing rights, subprocessor security assessments, continuous compliance monitoring, and audit rights for critical service providers.
Monitor Emerging Commercial AI Policy: Track global AI governance directives (including the EU AI Act, NIST AI RMF, and industry-specific AI guidelines) and data privacy mandates, translating evolving policy into actionable operational guidance for commercial teams.
Build Compliance Agents and Workflows: Automate as much of the day to day compliance work as possible to leverage your strategic insights

Commercial Compliance Lead

Responsibilities

Qualification

Required

Company

Factory

More roles at Factory