Vice President Cpra Jobs (NOW HIRING)

Kura Sushi USA is a publicly traded U.S. company established in 2008 as a subsidiary of Kura Sushi, Inc. We are an innovative and tech interactive Japanese restaurant chain serving up the ultimate eater-tainment dining experience with a combination of premium ingredients, advanced technology, and affordable prices to create a one-of-a-kind revolving sushi dining experience.
Come join the Kura Krew!This role is a hybrid role. The selected candidate must be able to come to the office in Irvine, CA on in office days and as needed to carry out necessary functions of the role.The GRC Senior Regulatory ComplianceAnalyst, who has proficient knowledge in regulatory compliance rulesand regulations will be responsible for assisting the Integrated GRC Senior Manager (JurisDoctorate) for ensuring Kura meets all applicable legal, regulatory,and internal regulatory compliance requirements and facilitating centralizedmonitoring. This includes but not limited to:

• Evaluating regulatory laws applicable to Kura business operations.
• Conducting compliance audits and reviews to ensure execution of compliance standards.
• Preparing and presenting compliance reports to the VP of ACAS and other applicable executives.
• Identifying compliance issues requiring follow-up or investigation.
• Disseminating written policies and procedures related to compliance activities.
  Collaborating with cross-functional departments to foster a culture of compliance.

• Maintaining documentation of compliance activities.
• Ongoing professional development andstaying abreast with the latest trends and changes in laws and regulations
  Other responsibilities include but notlimited to facilitating/moderating annual regulatory compliance riskassessments, reviewing contracts containing PII, system components, MNDA, performingcompliance assessments/reviews, monitoring compliance activities /remediationefforts, conducting investigations, and providing guidance and facilitation to cross-functionalpeers and senior management relating to various regulatory compliance that Kurais subject to such as CCPA/CPRA, PCI, Information Security (Cybersecurity), ArtificialIntelligence, Information Technology standards and Frameworks, FDA, ESG, SOXetc.

In addition, the GRC RegulatoryCompliance Senior Analyst will partner with/provide guidance to the GRC SeniorSecurity Analyst and the Head of Information Technology, when applicable, indesigning/implementing information services (IT and security) solutioncomponents used throughout Kura Sushi's environment as well as liaising withthe Internal Audit team for in-scope SOX systems. The GRC Regulatory Compliance SeniorAnalyst will be responsible for assisting the Integrated GRC Senior Manager in facilitatingKura's vendor relationships with several outsourced service providers as needed in establishing a scalable and compliant environment to support the Company'scompliance landscape to include security and technological components.
The GRC-RegulatoryCompliance Senior Analyst require proficient knowledge and understanding of compliancestandards and frameworks to include end-to-endbusiness process, security frameworks (including domains such as accessmanagement and data protection), regulatory compliance (e.g., SOX, PCI, CPRA, etc.)and technology standards, procedures, guidelines and; and be able to prepareand communicate compliance issues to the Integrated GRC Senior Manager, VP of ACASand others as directed by the VP of ACAS.
Key Responsibilities

• Policy & Procedure Development: Draft, review, and update privacy and compliance policies, procedures, and training materials to align with evolving laws and regulations
• Regulatory Monitoring: Research and interpret new or revised laws, regulations, and industry standards; track changes and recommend updates to the compliance program
• Risk Assessment & Auditing: Conduct risk assessments, compliance audits, and testing of controls to identify gaps and deficiencies; develop and implement gap closure plans
• Training & Culture: Lead or assist in compliance training programs for new hires and ongoing staff, promoting a culture of compliance
• Cross-Functional Collaboration: Work with legal, finance, operations, and other departments to integrate compliance into business processes(e.g., Privacy by Design "PbD")
• Reporting: Prepare clear, concise compliance reports for management and regulatory bodies, highlighting risks, findings, and recommendations

RegulatoryCompliance:

1.Ensurestheorganizationcomplieswithallapplicablelaws,regulations,andinternalpolicies.Thisincludesmonitoringbusinessoperationsandreportinganyinfractions.

2.Partners with General Counsel and other managementmembers, as needed

3.PolicyDevelopment:Create,modify,andimplementcompanypoliciesandprocedurestoalignwithlegalrequirementsandethicalstandards.

4.RiskManagement:Developriskmanagementstrategiesandconductregularauditstoidentifyareasofpotentialnon-compliance.

5.Managethe operational processes for Data Subject Requests (DRS) such as rights toaccess or delete personal data.

6.Maintainup-to-date Records of Processing Activities (RoPA) across departments.

7.Adviseoperational personnel on appropriate responses to recurring confidentiality anddata disclosure inquiries.

8.LiaisonwithRegulatoryBodies:Actasthepointofcontactbetweentheorganizationandregulatoryagencies,handlinginspectionsandaudits.

9.IncidentManagement:Investigatecompliancebreaches,conductrootcauseanalysis,andimplementcorrectiveactionstopreventrecurrence

10.Reporting:Provideregularreportstothe Integrated GRC Senior Manager, VP of ACAS and otherseniormanagementonthestatusofthecomplianceprogramandanyissuesthatarise.

11.Conductsannual regulatory compliance risk assessments

12.Reviewsand main contracts containing PII and system/AI components to ensure DPAs areissued to 3rd party vendors.

13.Performscompliance assessments/reviews, monitors compliance deficiencies/remediationefforts, conducting investigations,

Governance, Risk and Compliance (GRC Activities)

1.Providesguidance to the Information Services (Security and Technology) management inbuilding a strong IT/Security compliant environment including guiding andmentoring direct and indirect team members.

2.Providingguidance and facilitating coordination with cross-functional members inimplementing processes such as Security and IT governance, risk, and compliance activities toautomate and facilitate continuous monitoringof information security controls, exceptions, risks, and testing.

3.PerformPrivacy Impact Assessment (PIA) and Data Protection Impact Assessment (DPIA)for new system implementations.

4.Liaise with InternalAudit members to ensure appropriate controls over business and IT/Securitydesign while working with the IT management and cross-functional members tofacilitate operational efficiencies and effectiveness.

5.Evaluate third partyvendor contracts, performing privacy and security due diligence on businessassociates and service providers.

6.Developsreporting metrics, dashboards, and obtains and retains evidence and provides tothe Integrated GRC Senior Manager, VP of ACAS or other leadership, as neededfor review.

7.Provides guidance tothe Security Senior Analyst for building the organization's cybersecuritystrategy to ensure Kura Security team is proactively identifying/addressingrelevant security gaps, compliant with internal policies and externalregulatory requirements, and improving Kura's overall security posture andprogram.

8.Collaborates with cross-functionalbusiness, security and the information technology team to ensure securitystrategies and initiatives align with business objectives and regulatorycompliance requirements.

9.Provides guidance to theSecurity Manager in developing the system-wide information security complianceprogram, ensuring IT activities, processes, and procedures meet definedrequirements, policies, and regulations.

10.Collaborates with the IntegratedGRC Senior Analyst, GRC-Senior Security Analysts, Internal Audit and other keymembers who will at a minimum, facilitate and monitor compliance enterprisewide.
11. Facilitation and the coordination, development and implementation of security awareness compliance programs and education while partnering with the Security Manager.

12.Facilitates,guides coordinates, and partners with the Security Manager during the systemsdevelopment life cycle activities and new processes to ensure they are properlyimplemented in conjunction with guidance from the Internal Audit team.

13.Evaluates IT control/processdeficiencies issued by the Internal Audit team and provides remediation plans tothe Internal Audit Team for recommended design improvements while partneringwith the IT/Security team on remediation plan.

14.Facilitates and providesguidance to the IT HOD in the development of IT policies and procedures andensures alignment with company goals and regulatory requirements.

15.Presents issues of IT non-complianceto the Integrated GRC Senior Manager and VP of ACAS

16.Attends continuing professionaleducation to keep abreast of security and technology regulations, emergingrisks and strategies.

17.Presents progress andinitiatives on a monthly basis based on annual plan to the Integrated GRCSenior Manager and VP of ACAS

18.Perform other projectsassigned by the Integrated GRC Senior Manager and VP of ACAS
SKILLS ANDQUALIFICATIONS:To perform this job successfully, an individualmust be able to perform each essential duty satisfactorily.The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonableaccommodations may be made to enable individuals with disabilities to perform the essential functions.
Education/Experience:

1.Bachelor's degree in business, Finance, Law, Accounting, or related field; MBA, Juris Doctorate,Information Technology or advanced degree preferred

2.Prefer Juris Doctorate degreewith compliance certifications such as:CertifiedInformationPrivacyProfessional(CIPP/US),Certified Regulatory Compliance Manager (CRCM),Certified Compliance& Ethics Professional (CCEP); desirable to possess CIA/CISA/CPAcertifications.

3.5 years of experiencein regulatory compliance with legal, compliance and/internal audit role andprefer multi-location restaurant and/or retail businesses background.

4.Big 4 consultingexperience

5.Proficiency with Office365 (O365), particularly: PowerPoint, Outlook, Excel, and Word

6.Proficient with regulatoryrequirements related toCCPA/CPRA, PCI, ESG,Information Security (Cybersecurity), Information Technology, SOX, ADA, FDAetc.

7.Proficient with Optro(formerly Audit Board)-Cross Comply, Risk Oversight, BigID, Contract ManagementSystems, NAVEX

8.Strong regulatorycompliance background.

9.Excellent leadershipand people management skills.

10.Skills in documenting risk,and regulatory compliance activities

11.Familiar with dashboardcreation

12.Communicatesconfidently with executive management, corporate support personnel,cross-functional peers, and product/services providers at appropriate technicallevels for each and liaises with different ACAS functional areas, e.g.,Security, GRC and Internal Audit to ensure appropriate compliance controls. Demonstratesability to articulate business cases for identified technology solutions.
13.Demonstrates ability toarticulate regulatory compliance and information services activities to theAudit Committee or the Board, at the request of the VP of ACAS, if needed.
14.Excellent analyticaland troubleshooting skills.
15.Ability to work underpressure.