MyPass Global

Compliance

• Monitor the policy lifecycle to ensure review deadlines are met
• Coordinate the policy review and approval process across all business areas
• Publish approved policies in Confluence and Drata
• Maintain controlled templates within the master files and Google Gallery
• Coordinate the timely review of risks within Drata
• Support the Senior Corporate Services Manager with risk assessment scheduling
• Monitor and report on Drata control readiness
• Create and manage Jira tickets for control issues requiring remediation
• Maintain the Drata evidence register
• Maintain the third-party provider register covering software vendors
• Ensure vendor contract records, renewals, and review evidence are current
• Own the CAPA register within QT9, covering corrective actions arising from ISO audits
• Support the internal audit programme, providing CAPA status and evidence to the Lead Auditor

GRC Analyst