drjobs Sr Director of Compliance

Sr Director of Compliance

Employer Active

1 Vacancy
The job posting is outdated and position may be filled
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

Anne Arundel County, MD - USA

Yearly Salary drjobs

$ 150000 - 180000

Vacancy

1 Vacancy

Job Description

Introduction

The Department of Information Technology (DoIT) provides support to state agencies the Executive Office of the Governor the Governors coordinating offices and a variety of independent agencies within the Executive Branch.

Striving to provide the highest level of customer service to its internal and external customers DoIT supports Marylands agencies and commissions through its leadership and strategic direction for Information Technology and Telecommunications establishing a long range target technology architecture encouraging cross agency collaboration and advocating best practices for operations and project management.

GRADE

INDV 0018

LOCATION OF POSITION

100 Community Place Crownsville MD 21032

POSITION DUTIES

This Senior Director of Compliance is responsible for coordinating the development implementation and maintenance of policies and procedures across DoIT; implementing an internal and external audit and monitoring program to include the conduction of audits and systemic monitoring; procurement compliance; third party compliance with vendor contracts; coordination preparation and implementation of external independent State and federal audits and monitoring of implementation of corrective action/risk mitigation plans; and the oversight of the States privacy program.

The position is designated to manage compliance policy and procedure privacy audit monitoring and ethics activities within each division of the Department of Information Technology (DoIT).

Will also ensure that any state agency that falls under DoITs jurisdiction for IT services is staying compliant with their approved/established IT policies OLA audit findings and responses and training of staff in all DoIT Security IT policies as well as state and federal security policies and best practices.

Develop implement and manage DoITs compliance program.
  • Develop a comprehensive effective Compliance Program to include an annual compliance plan policies and procedures training reporting mechanisms nonretaliation and corrective actions.
  • Independently investigate or cause an investigation of individual and systemic problems assist in the design and implementation of corrective actions/risk mitigations and develop policies accordingly.
  • Conduct analyses and advise executive leaders about compliance implications of business decisions upon request to include action taken by the Software Review Board (SRB) and Change Advisory Board (CAB).
  • Advise senior leaders or their designees on standards and methods to address issues and risks jeopardizing initial or ongoing compliance with applicable requirements.
  • Establish a plan for the prioritization creation review and oversight of new and current policies and standard operating procedures (SOPs) for all DoIT offices in close coordination with leadership who are accountable for their staffs consistent implementation thereof.
  • Validate that all policies and SOPs both existing and new are workable accountable and functioning. Analyze and prioritize compliance risks to minimize risk and maximize resources. Make recommendations of such to executive leadership.
  • Stay abreast of current compliance practices via review of proposed State legislation fiscal notes and position statements as well as pending federal laws and regulations.
  • Create policies and procedures for criminal background checks for both DoIT staff and third party vendors.
  • Ensure third party vendors are hiring their employees based on employment eligibility that adheres to federal I9 guidelines.
Manage internal and external audit programs and relationships.
  • Reviews Office of Legislative Audit (OLA) reports discussion notes and audit work papers for both DoIT audits and other state agency/programs with repeat or significant IT findings. Review these plans to resolve audit findings and assess the adequacy of agency plans to satisfactorily resolve findings. Assists and advise state agencies on the adequacy of their plans to resolve findings. Identifies where planned corrective actions appear inadequate and where areas of disagreement exist.
  • Monitors overall implementation of agency corrective and ongoing actions to resolve audit findings. Audits implementation of agency actions to ensure that corrective actions are taken to ensure audit findings are resolved. Will report to the Deputy Secretary and other executive leadership on the adequacy of agency actions.
  • Coordinates with Department of Budget and Managements Audit Compliance Unit (DBM ACU) and attends quarterly Internal Auditor Forum Meetings and periodic Chief Internal Auditor meetings.
  • Oversee and coordinate OLA requests relating to external agency audits.
  • Assists or conducts special audits and reviews as necessary.
  • Recommend corrective action or sanctions when repeat audit findings are not remedied.
Implement manage and monitor effectiveness of Compliance and ethics training.
  • Initiate facilitate and promote activities that foster a culture of compliance including training on the Code of Ethics compliance program and fraud waste and abuse reporting and awareness programs.
  • Collaborate with either state agency human resource staff or Chief Information Officers are ensuring regular and contractual employees are completing required IT training and executing any attestations in a timely manner.
  • Collaborate with third party vendor company designee to ensure third party contractors are completing required IT training and executing any attestations in a timely manner.
  • Create regulation specific checklists to promote compliance especially related to IRS Safeguards Criminal Justice information and procurement requirements.
  • On an annual basis update employee orientation and employee and external stakeholder training to include lessons learned best practices and updates to state and federal regulations.
  • Additionally provide ad hoc training and awareness programs to promote best practices across DoIT and state agencies.

***This is a Management Service position that serves at the pleasure of the appointing authority***

MINIMUM QUALIFICATIONS

Education: Bachelors Degree in Business Administration Accounting Information Technology or related field.

Experience: Eight years experience creating and managing an IT compliance program for a large organization or state/federal government entity. To include experience with financial and IT compliance audits. Three of the eight years needs to be in a supervisory role overseeing other compliance/audit staff.

DESIRED OR PREFERRED QUALIFICATIONS

Preference will be given to applicantswho possess the following preferred qualification(s).Include clear and specific information on your application regardingyour qualifications.

  1. A Juris Doctor (JD) degree.
  2. Certifications such as: CISA CISSP and/or CIPP

SELECTION PROCESS

Please make sure that you provide sufficient information on your application to show that you meet the qualifications for this recruitment. All information concerning your qualifications must be submitted by the closing date.We will not consider information submitted after this date.Successful candidates will be ranked as Best Qualified Better Qualified or Qualified and placed on theeligible (employment) list for at least one year.

BENEFITS

FURTHER INSTRUCTIONS


Required Experience:

Director

Employment Type

Full-Time

About Company

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.