Support the SCRA Lead in executing Twilio’s global security regulatory strategy
Independently interpret complex and ambiguous regulatory frameworks
Support the development and maintenance of regulatory repositories and systems of record
Execute and continuously improve the Cyber Regulation Intake & Triage process
Map regulatory requirements to internal control frameworks
Develop regulator-ready and high-quality artifacts
Identify, analyze, and escalate regulatory risks and audit obligations
Partner cross-functionally with teams
Drive execution of process improvements, tooling enhancements, and automation initiatives
Operate with high ownership and accountability
Requirements
5–8+ years of experience in security compliance, telecom compliance, regulatory affairs, GRC, or related domain within a global technology, cloud, or telecom environment
Experience interpreting and operationalizing security frameworks and regulations (e.g., NIS 2, ISO 27001, SOC 2, telecom regulatory regimes)
Experience mapping regulatory requirements to control frameworks, policies, and technical implementations
Broad understanding of security architecture, networking, access control, software development, cryptography, and operations
Ability to analyze ambiguous regulations / regulatory requirements and produce defensible interpretations
Strong written communication skills with ability to produce audit-ready and regulator-defensible documentation
Proven ability to collaborate across Legal, Engineering, Security, Product, Sales, and Risk teams
High level of self-sufficiency, critical thinking, and ownership
Demonstrated ability to independently execute and deliver complex workstreams end-to-end
Ability to manage multiple concurrent priorities in a global, fast-evolving regulatory landscape