vinemobile creates a dedicated Risk & Compliance practice lead role

Why a dedicated lead

Regulated clients ask more of their technology partners every year: evidence for auditors, answers for customer questionnaires, assurance for boards. Demand for our risk and compliance work has grown alongside our security and cloud engagements, and it deserves a single point of accountability. vinemobile has therefore created a Risk & Compliance practice lead role, and we are now recruiting for it.

What the role is responsible for

The practice lead will direct how we deliver governance, risk and compliance services to clients and ensure they connect to the work of our other practices.

• Setting methodology for risk assessments, control mapping and audit readiness engagements.
• Ensuring consistent quality of deliverables such as policies, risk registers, gap analyses and evidence packs.
• Working with clients' leadership on compliance roadmaps tied to frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001 and SOC 2 criteria.
• Coordinating with our Security, Cloud and Managed IT practices so that technical controls and compliance evidence reinforce one another.
• Developing and mentoring the practice's consultants and analysts.

What this means for clients

Clients will see a clearer structure and more consistent outcomes. Engagements will follow a common approach from scoping through remediation, with a named practice-level escalation path if priorities change or a deadline tightens. For organizations preparing for a first audit or maintaining recurring obligations, that consistency reduces rework and helps evidence stay usable from one cycle to the next.

It also formalizes something we already believe: compliance is not a document exercise. Controls need to operate, be monitored and produce evidence as a by-product of daily work. A leader focused on that outcome helps us build it into every engagement.

The appointment also supports our wider growth in regulated sectors. Financial services, healthcare and public-sector clients frequently ask how our technical work maps to their obligations, and the practice lead will own that mapping so answers are consistent and well documented from the first conversation.

The kind of leader we are looking for

We are seeking someone with deep experience delivering assurance and risk programs in regulated environments, who can talk credibly with both auditors and engineers and who enjoys building teams. The role is based at our San Jose, California head office with flexibility for hybrid working. Details and the application process are available on our careers page.

Until the appointment is made, the existing Risk & Compliance team continues to serve all current engagements with no change to scope, contacts or service commitments.