Description:
Responsibilities:
-
Lead and manage the Information Assurance and Compliance team, providing guidance, mentorship, and performance oversight
-
Oversee compliance programs aligned with regulatory and security frameworks (e.g., NIST, ISO 27001, HIPAA, FedRAMP, SOX as applicable)
-
Coordinate internal and external audits, including evidence collection and audit response activities
-
Ensure systems and processes comply with established security controls and policies
-
Conduct risk assessments and track remediation of identified gaps or vulnerabilities
-
Develop, implement, and maintain information security policies, standards, and procedures
-
Monitor compliance metrics and prepare executive-level reports and dashboards
-
Collaborate with IT and security teams to ensure controls are properly implemented and maintained
-
Manage continuous monitoring and control validation activities
-
Support incident response and ensure proper documentation of compliance impact
-
Liaise with auditors, regulators, and third-party assessors
-
Drive process improvements to strengthen governance, risk, and compliance (GRC) practices
Requirements:
Minimum requirements: Bachelors degree and 8+ years experience
*Position subject to CSWF requirements*