Description:
Responsibilities:
- Lead and manage the Information Assurance and Compliance team, providing guidance, mentorship, and performance oversight
- Oversee compliance programs aligned with regulatory and security frameworks (e.g., NIST, ISO 27001, HIPAA, FedRAMP, SOX as applicable)
- Coordinate internal and external audits, including evidence collection and audit response activities
- Ensure systems and processes comply with established security controls and policies
- Conduct risk assessments and track remediation of identified gaps or vulnerabilities
- Develop, implement, and maintain information security policies, standards, and procedures
- Monitor compliance metrics and prepare executive-level reports and dashboards
- Collaborate with IT and security teams to ensure controls are properly implemented and maintained
- Manage continuous monitoring and control validation activities
- Support incident response and ensure proper documentation of compliance impact
- Liaise with auditors, regulators, and third-party assessors
- Drive process improvements to strengthen governance, risk, and compliance (GRC) practices
Requirements:
Minimum requirements: Bachelors degree and 8+ years experience
*Position subject to CSWF requirements*