As the Senior Director of Accessibility and Technology Compliance, you will help scale and improve Pluto’’s technology compliance program to accommodate the growing and evolving needs of our audience. This is a unique opportunity to advance our focus on accessibility compliance as a competitive advantage that grows our business and increases audience engagement and reach. 

The best candidates for this role will have a well-rounded background in technology audit, accessibility and assurance, with prior experience reviewing or implementing controls in modern cloud-based environments. This person will work closely with a variety of groups within the organization to perform risk assessments, regulatory research, and conduct internal tests to measure compliance with relevant regulations and frameworks such as FCC Quality Standards or the ADA Section 508 CVAA. 

This role reports to the VP of Engineering Operations, and will require recent, hands-on experience in the streaming industry.

• Maintain a deep understanding of our platform and its supporting infrastructure and processes, as well as how our compliance obligations apply to that environment
• Provide responses to and maintain reference material for customer inquiries and due diligence procedures that involve technology compliance and participate in discussions for security and compliance assessments
• Continuously confirm and refine Pluto’s internal control framework and related documentation (e.g., policies, procedures, narratives, training material)
• Develop, perform, and report on internal testing of technology controls
• Conduct internal testing to measure compliance with GDPR, CCPA, ISO, NIST and other regulations and frameworks.
• Effectively communicate findings and recommendations to senior management in detailed and organized format/process
• Organize, Monitor, Following-up and implement corrective actions
• Delivering training to other members of the company on policies and procedures
• Consult on company projects to ensure that privacy risks are being addressed.
• Actively identify and communicate control gaps; help the company develop and confirm remediation efforts
• Designing, developing and implementing policies, identifying technologies to support policy objectives, and conducting risk assessments
• Research both regulatory filing information and writing and communicating guidelines to keep other departments aware of requirements
• Effectively communicate findings and recommendations to management in detailed and organized format/process
• Organize, Monitor, Following-up and implement corrective actions
• Liaise with external auditors and internal partners to facilitate audit procedures and evidence gathering
• Support third party oversight processes, including security and compliance assessments of Pluto’s vendors and service providers
• Contribute to ongoing controls development and improvement

We believe the right individual will have the following skills and experience in order to be successful in this role:

• Seven years of accessibility or compliance analysis, or assurance/advisory experience in the technology space
• Experience mapping and rationalizing controls to meet requirements across multiple information technology compliance standards 
• BS degree in Management Information Systems, Computer Science, or a related field, or equivalent professional experience
• CISA, CISM, CISSP, CRISC, or related certification preferred
• Experience using governance, risk management, and compliance (GRC) tools preferred
• Excellent written and verbal communication skills, adaptable to a wide spectrum of personalities
• Ability to write data mapping and solution workflow diagrams, system documentation, playbooks, policies, etc
• A veritable compliance cheerleader whose enthusiasm is both endearing and infectious
• Strong analytical skills and attention to detail
• Ability to efficiently and effectively handle multiple projects with minimal day-to-day oversight/direction 

• Strong capabilities in gap analysis, review and validation of relevant accessibility and regulatory requirements