Description

You will lead IT audit, compliance, and risk mitigation efforts to ensure alignment with regulatory standards and internal policies.

This role is on-site.

Responsibilities

• Review audit findings and exceptions to ensure strict compliance with industry standards.
• Assess IT policies against governmental regulations and evaluate data security and processing processes.
• Identify system vulnerabilities and recommend enhancements to mitigate risks in accordance with state and federal laws.
• Draft IT policies and Corrective Action Plans to resolve outstanding audit findings.
• Collaborate with stakeholders to address compliance gaps and document regulatory alignment.

Required Skills

• 12+ years of experience in relevant audit or compliance fields.
• Proficiency with GRC tools, specifically RSA Archer or ServiceNow GRC.
• Deep knowledge of SOC 1, SOC 2, and SOC 3 reporting frameworks.
• Familiarity with NIST, ISO 27001, GDPR, CCPA, or HIPAA regulations.
• Experience auditing data processing, security, and programming guidelines.
• Strong technical writing skills for policy drafting and audit documentation.
• Bachelor's Degree in Information Technology, Cybersecurity, or a related discipline.
• CISA, CISSP, or CRISC certification.

Preferred Skills

• Experience with state and federal legal compliance frameworks.
• Background in data security and processing guidelines.

Key Skills

Education

Bachelor's Degree