Manager, IT Compliance - Remote, East Coast (Raleigh, Jersey City or New York City preferred)

About the role

The Manager, IT Compliance plays a crucial role in ensuring the company adheres to regulatory standards and internal controls. Reporting to the CISO and Director of IT Security, this position oversees the compliance function, collaborating with various IT and business stakeholders.

Responsibilities

• Work with IT process owners to identify and document detailed controls for key application, security, and infrastructure components.
• Provide ongoing guidance on IT control requirements and their impact across the organization.
• Facilitate interactions between control owners and internal/external audit teams, serving as the primary point of contact.
• Manage and report on IT control gaps, tracking issues to resolution, and recommending improvements.
• Lead in the design and implementation of efficient and effective controls within the organization.
• Participate in data privacy governance activities such as data mapping and assessments.
• Manage the response to IT-related customer security assessments.
• Proactively identify IT control gaps and automate control reviews where feasible.
• Manage the access recertification process.

Requirements

• 5+ years of combined experience in Information Systems audit, IT security, IT governance, IT risk, and IT compliance.
• In-depth knowledge and experience with Sarbanes-Oxley, PCI-DSS, ISO 27001, SOC 2, and NYDFS Cybersecurity Regulation.
• Working knowledge of Windows Operating System and Active Directory Security, including Users and Groups, Group Policy, Domain Structures, Security, and Auditing.
• Working knowledge of agile development methodology and DevOps practices and technologies.
• Desire to measure and continuously improve in all areas and facets.
• Demonstrated ability to balance short-term tactical wins with longer-term strategic solutions.
• Transformative mindset and experience operating as a change agent.

Preferred Qualifications

• 8+ years of combined experience in the fields of Information Systems audit, IT security, IT risk, and IT compliance.
• CISSP, CISA, CISM, or CCSK certifications.
• Excellent oral and written communication skills, capable of explaining technical concepts to both technical and non-technical audiences.
• Ability to establish relationships and build rapport to influence colleagues at all levels, identify business issues, and address needs.
• Experience in a highly regulated industry, such as insurance and/or financial services.
• Some knowledge of and understanding of creating/running SQL queries, and scripting using Python and PowerShell.

Environment and/or Physical Factors

Remote work with the option to travel to the main assigned office quarterly for key meetings. Ability to travel within the U.S. up to 10-20% of the time. Incumbent may be asked to perform other duties as required.

Benefits

Competitive salary based on experience (DOE), full benefits package including medical, dental, vision, and prescription drug coverage; 401(k) with generous matching; PTO starting at 20 days per year; up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Off; basic Life and AD&D Insurance as well as Short and Long-Term Disability; Paid Parental Leave of up to 10 weeks; Student Loan Assistance and Tuition Reimbursement; Backup Child and Elder Care; and more. Click here to learn more about available benefits.