Climate Arc

Compliance

• Deliver FCA (and USA and EU equivalent) policies and procedures complying with the upcoming ESG data providers guidelines.
• Serve as Arc’s Data Protection Officer, ensuring GDPR compliance across operations, platforms, and data workflows.
• Manage all privacy governance activities including DPIAs, staff training, documentation, and data subject request processes.
• Maintain SOC2-related compliance policies and coordinate evidence, reviews, and security governance with product and technology teams.
• Manage all required filings and reporting with relevant regulators, including UK Charity Commission, US state charity registrations, and other statutory bodies including and equivalent to the FCA.
• Work with the Finance team on 501(c)(3) and sales-tax-exemption compliance, state exemption certificates, and related obligations.
• Maintain a clear, up-to-date compliance framework and ensure organization-wide understanding of obligations.
• Create and implement a risk management framework, including relevant management and reporting mechanisms.
• Own the organizational Risk Register, working with senior stakeholders to identify, assess, and manage risk.
• Lead risk assessments and ensure alignment with funder expectations and operational best practice.
• Develop and deliver relevant and fit-for-purpose organizational training in the areas of Compliance and Risk.
• Act as the single point of contact for all internal legal, audit, and compliance needs, ensuring adequate resourcing and coverage of identified issues.

Risk & Regulatory Compliance Officer