You need someone who has the time and sufficient expertise to drive the process forward and keep everyone on track. Managing compliance doesn’t need to be someone’s full time job, but at a minimum, you need someone who can devote a good portion of their time to managing the process. Additionally, the project leader needs a sufficient understanding of your business and your technology stack and be able to figure out what controls the organization needs to create in order to meet the requirements of the program.