Information Security Compliance Program Manager

Minimum Qualifications?

• 3 years of experience with project or program management, governance and security processes
• 3 years of experience with one or more security compliance frameworks: AICPA Trust Principles (SSAE 16 ? SOC 2 and 3), NIST, ISO 27000 Series, PCI DSS, HIPAA, SOX, SANS CIS Critical Security Controls, regulations governing personally identifiable information and other regulatory compliance frameworks?
• 3 years of experience with Microsoft Excel, Power BI, Tableau, Python, R or other data analysis tools
• Bachelor?s degree in computer science, information technology, or a related field or equivalent experience
• Proficiency in the Microsoft Office suite

• 5 years of experience with project or program management, governance and security processes
• 5 years of experience with one or more security compliance frameworks: AICPA Trust Principles (SSAE 16 ? SOC 2 and 3), NIST, ISO 27000 Series, PCI DSS, HIPAA, SOX, SANS CIS Critical Security Controls, regulations governing personally identifiable information and other regulatory compliance frameworks?
• 5 years of experience with Microsoft Excel, Power BI, Tableau, Python, R or other data analysis tools
• Experience in working with with third-party or nth-party risk evaluation and auditing
• Program Management Professional Certification
• Proficiency in the Microsoft Office suite

• Scope, design and coordinate compliance processes and due diligence efforts with internal and external stakeholders to provide timely deliverables and rapid remediations
• Lead information security compliance projects by managing project phases, coordinating and driving communication, facilitating decisions and ensuring follow through on the execution of projects with internal and external stakeholders to provide timely program deliverables and rapid remediations
• Develop performance dashboard and metrics for regular reporting to all levels of the organization on program status and performance
• Develop and evangelize frameworks, training, and best practices around compliance and information security to be used broadly across the organization
• Continuously identify, assess, and advise and prioritize IT- and business-related risks and control weaknesses
• Diagram processes to identify process gaps and potential areas for improvement
• Advise on complex control requirements as needs arise
• Influence cross-functional teams directly or indirectly within a matrixed organization and effectively manage multiple projects with competing priorities
• Drive the execution of program plans across cross-functional teams; foresee, monitor, and mitigate risks; take appropriate action to address challenges and provide regular updates to key stakeholders
• Simplifies constantly at the program level and mentors junior team members
• Use a deep understanding of the audience and masterfully communicate engaging materials to influence and persuade cross-functional teams
• Synthesize large sets of data to draw conclusions and perform data-driven decision making