A Moving Experience.
Key Responsibilities
- Own and operate a single, integrated compliance management system spanning quality, HSE, security, privacy, legal/regulatory, and internal controls.
- Define and maintain enterprise compliance policies, standards, controls, and evidence frameworks that are audit-ready and scalable.
- Establish clear governance and accountability, including a cross-functional compliance RACI across Legal, Security, Quality, HSE, Product, Engineering, and Finance.
- Drive awareness and prioritization of regional regulatory obligations (EU, US, APAC, China, etc.)
- Maintain customer facing Trust Center.
- Chair compliance workgroup, establish workflow and pipeline for strategic compliance and certification investments.
- Plan, coordinate, and lead internal/external audits, including certification, customer, and regulator audits; drive pragmatic corrective actions and strategic solutions.
- Ensure quality, safety, and process compliance supports OEM contractual and product approval requirements.
- Partner with Security, Product, and Engineering to ensure compliance with key security and automotive cybersecurity frameworks (e.g., ISO 27001/27017, TISAX, ISO 21434, ASPICE) and secure development expectations.
- Support operationalizing global privacy compliance (e.g., GDPR/UK GDPR), including DPIAs, privacy risk assessments, and defensible records of processing and data flows.
- Monitor regulatory change and translate legal requirements into actionable controls, working closely with legal to support compliance representations and customer due diligence.
- Serve as the primary compliance interface to the CFO’s Internal Audit team and support SOX-adjacent/internal-control testing where applicable.
- Maintain a consolidated view of enterprise compliance risk, drive risk-based prioritization, and provide regular reporting to executive leadership and the Audit Committee.
- Convert local laws and regulations to actionable requirements (e.g., China GB44495, Germany, EU CRA).
Qualifications & Experience
Required
- 8+ years (Senior Manager) in compliance, risk, quality, security, or regulatory roles within software, automotive, cloud, or regulated technology industries.
- Demonstrated experience owning multiple compliance domains simultaneously.
- Strong understanding of ISO-based management systems and audit operations.
- Experience interfacing with internal audit, external auditors, and regulators.
- Ability to translate legal and regulatory requirements into operational controls.
- Proven stakeholder management across Legal, Engineering, Product, Security, Finance, and Operations.
- Systems thinker who understands how compliance, engineering, security, and finance interlock.
- Pragmatic and risk‑based, not checkbox‑driven.
- Comfortable operating with executive leadership and boards.
- Credible with engineers, auditors, and lawyers alike.
- Calm, structured, and decisive in audit or regulatory pressure situations.
- Self-starter who works well both independently and on collaborative teams.
Preferred
- Exposure to connected-vehicle, cybersecurity, or AI regulatory regimes.
- Experience building or maturing integrated compliance programs at scale.
- International experience working across regions and regulatory frameworks.
What we offer
We offer a generous compensation and benefits package (in addition to the base salary), including:
- Salary range $124,425.00 CDN - $199,080.00 CDN It is not typical for offers to be made at or near the top of the range. The actual salary will be determined based on experience and other job-related factors.
- Insurance coverage (medical, dental, vision, life, and disability)
- Company contribution to the CDN RRSP (Registered Retirement Savings Plan)
- Equity awards for certain positions and levels
- Remote and/or hybrid work available depending on the position
All compensation and benefits are subject to the terms and conditions of the underlying plans or programs, as applicable, and may be amended, terminated, or replaced from time to time.
Cerence Inc. (Nasdaq: CRNC and www.cerence.com) is the global industry leader in creating unique, moving experiences for the automotive world. Spun out from Nuance in October 2019, Cerence is a new, independent company that has quickly gained traction as a leader in the automotive voice assistant space, working with all of the world’s leading automakers – from Ford and Fiat Chrysler to Daimler, Audi and BMW to Geely and SAIC – to transform how a car feels, responds and learns. Its track record is built on more than 20 years of industry experience and leadership and more than 500 million cars on the road today across more than 70 languages.
As Cerence looks to the future and continues an ambitious growth agenda, we need someone to join the team and help build the future of voice and AI in cars. This is an exciting opportunity to join Cerence’s passionate, dedicated, global team and be a part of meaningful innovation in a rapidly growing industry.
EQUAL OPPORTUNITY EMPLOYER
Cerence is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination on the basis of age, race, color, gender, gender identity, gender expression, sex, sex stereotyping, pregnancy, national origin, ancestry, religion, physical or mental disability, medical condition, marital status, citizenship status, sexual orientation, protected military or veteran status, genetic information and other protected classifications. Cerence Equal Employment Opportunity Policy Statement.
All prospective and current Employees need to remain vigilant when it comes to executing security policies in the workplace. This includes:
- Following workplace security protocols and training programs to familiarize with the ways to maintain a safe workplace.
- Following security procedures to report any suspicious activity.
- Having respect for corporate security procedures to allow those procedures to be effective.
- Adhering to company's compliance and regulations.
- Encouraging to follow a zero tolerance for workplace violence.
- Basic knowledge of information security and data privacy requirements (e.g., how to protect data & how to be handling this data).
- Demonstrative knowledge of information security through internal training programs.
