DESCRIPTION

We are looking for a talented Manager of IT Governance, Risk and Compliance to join our team; remote work optional.

In this role, you will make an impact in the following ways:

1. Expert Guidance : By serving as the subject matter expert, you'll provide crucial input for compliance testing and risk assessments, ensuring adherence to various compliance programs like SOX, PCI, and HIPAA.
2. Quality Assurance : Leading the performance of complex quality checks on artifacts and evidence, you'll ensure their completeness and accuracy, maintaining high standards in compliance assessments.
3. Problem Solving : Identifying and resolving complex compliance issues and their root causes will be key to maintaining the integrity of compliance programs.
4. Effective Communication : Your input and recommendations for written reports will effectively communicate compliance assessment results to business and IT leadership, aiding informed decision-making.
5. Relationship Building : Developing and maintaining positive relationships with customers and stakeholders will foster a collaborative environment and enhance the success of compliance programs.
6. Training Leadership : Leading necessary training sessions will ensure that all team members are well-equipped to support compliance initiatives.
7. Audit Coordination : Coordinating with internal and external audit agencies will streamline compliance activities and ensure thorough and efficient audits.
8. Technical Expertise and Mentorship : Providing technical guidance and coaching to less experienced staff will build a stronger, more knowledgeable team, enhancing overall performance.

• Remote optional
• Provides oversight of third parties involved in compliance activities.
• Provides clear and concise flowcharts, narratives, and reports to document processes and controls.
• Provides an evaluation of operational and financial risk exposure to support Sarbanes Oxley compliance.
• Provides advisory work that involves exploring, identifying, proposing, and, when appropriate, executing, opportunities to improve processes and automate and/or streamline tasks.
• Provides expertise in continuous monitoring and computer assisted audit techniques (CAAT)
• Knowledgeable in NIST, COSO, Cobit

• Build Networks : Develop strong formal and informal relationships both inside and outside the organization to foster collaboration and support.
• Apply Business Insight : Use your understanding of the business and marketplace to drive the organization's goals forward.
• Demonstrate Self-Awareness : Continuously seek feedback and reflect on your strengths and weaknesses to improve your performance and personal growth.
• Develop Talent : Invest in the growth of your team members, helping them achieve their career goals while aligning with the organization's objectives.
• Drive Engagement : Create an environment where team members are motivated and committed to achieving the organization's goals.
• Ensure Accountability : Hold yourself and others accountable for meeting commitments and delivering results.
• Show Interpersonal Savvy : Relate openly and comfortably with diverse groups of people, building trust and effective working relationships.
• Exhibit Organizational Savvy : Navigate complex organizational dynamics with ease, understanding policies, processes, and people.
• Be Resourceful : Efficiently secure and deploy resources to meet the organization's needs.
• Maintain a Strategic Mindset : Anticipate future trends and translate them into actionable strategies that drive the organization forward.
• Manage Cybersecurity Risks : Identify and assess cybersecurity risks, developing and implementing mitigation strategies in line with industry frameworks and organizational policies.
• Ensure Regulatory Compliance : Evaluate and ensure the effectiveness of controls to comply with legal and regulatory requirements.
• Value Differences : Recognize and leverage the diverse perspectives and cultures within the organization to enhance innovation and performance.

• College, university, or equivalent degree in Information Technology or related field required.
• Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems and Controls (CRISC) or similar certification is preferred.

• Significant relevant experience required. 5-7 years of experience.