Senior Compliance Specialist

Energy Solutions is seeking a Senior Compliance Specialist who will analyze, assess, and coordinate compliance with complex regulatory, contractual, privacy, audit, operational, data security, ethics, and risk management requirements under the direction of the General Counsel and Assistant General Counsel. This non-attorney role identifies compliance obligations, evaluates business risks, and recommends practical compliance solutions for legal review and business implementation.

The Senior Compliance Specialist will operate with a high degree of independence, conduct risk assessments, interpret contractual and regulatory requirements, support audit and governance activities, and serve as a key compliance resource across the organization. Additionally, this person will collaborate with business units, project teams, Information Security, People and Culture, Finance, and external stakeholders to support compliance with contractual obligations, privacy requirements, regulatory requirements, audit expectations, and organizational policies.

This is a perfect opportunity for someone with strong analytical judgment, critical thinking, communication, and problem-solving skills, along with the ability to manage multiple priorities in a fast-paced environment.

Responsibilities include but are not limited to:

• Facilitate Energy Solutions’ compliance and ethics program in alignment with regulatory requirements, contractual obligations, and organizational standards.
• Conduct compliance assessments and monitoring activities to identify potential risks, control gaps, and compliance concerns.
• Analyze regulatory requirements, contractual obligations and changes, audit provisions, client flow-down requirements, and operational commitments to determine compliance obligations.
• Support privacy compliance activities, including ensuring compliance with California privacy requirements and other applicable privacy regulations, and responding to consumer privacy requests.
• Conduct preliminary assessments of security events and privacy incidents, support the Company’s response, and escalate legal interpretation questions to counsel, as needed.
• Prepare regulatory filings, compliance reports, and audit-related documentation.
• Assess contractual insurance requirements and coordinate company insurance coverage, renewals, certificates, and supporting documentation.
• Develop and maintain compliance-related policies, procedures, guidance documents, and operational controls.
• Support due diligence reviews, client questionnaires, proposal activities, and contractual compliance assessments.

Minimum Qualifications:

• A Bachelor’s degree in business administration, Legal Studies, Business Management, Public Policy, Risk Management, Project Management, Information Security, Compliance, or related field.
• 8 years of experience in contractual compliance, privacy laws, risk management, audit, legal operations, regulatory operations, governance, or related professional function.
• Experience interpreting and implementing regulatory, contractual, privacy, audit, or compliance requirements in a business environment.
• Experience conducting compliance assessments, risk analyses, monitoring activities, audits, remediation efforts, or operational reviews.
• Experience supporting privacy, data protection, contractual compliance, governance, or risk management programs.
• Experience facilitating compliance activities across multiple business functions and stakeholders.
• Experience working with clients, auditors, regulators, subcontractors, or external stakeholders regarding compliance-related matters.
• Experience developing policies, procedures, training materials, compliance documentation, and governance controls.
• Advanced knowledge of privacy regulations, including CCPA/CPRA and other state-related regulations and laws, privacy rights requests, data protection obligations, and privacy incident response processes.
• Willingness to conduct limited business travel (approximately 5%).

Preferred Qualifications:

• A Master’s degree in business administration, Legal Studies, Public Policy, Risk Management, Regulatory Compliance, Information Security, Privacy, Project Management, or related fields.
• Certified Information Privacy Professional (CIPP/US) is strongly preferred.
• Certified Compliance and Ethics Professional (CCEP) preferred.
• Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Risk and Compliance Management Professional (CRCMP), or similar compliance, audit, or risk management certification preferred.
• Experience administering privacy compliance programs, including privacy rights requests, privacy incidents, privacy impact assessments, and state privacy regulations.
• Experience working with government contracts, grant-funded programs, regulatory requirements, or highly regulated contractual environments.
• Experience supporting SOC 2, NIST, ISO, or similar governance and compliance frameworks.
• Experience managing contract compliance programs, audit obligations, insurance requirements, reporting obligations, and client flow-down requirements.
• Experience serving as a compliance resource and supporting compliance monitoring, governance activities, policy development, training initiatives, and organizational compliance programs.
• Experience preparing compliance reports, audit responses, risk assessments, dashboards, executive summaries, and governance-related reporting.