Ensure compliance & audit activities are completed in a timely and appropriate manner
Act as SME supporting functional managers in understanding and applying responsibilities towards compliance & audit providing recommendations as appropriate
Lead new required industry framework / standard implementation from third line of defense per se.
Develop and update Policies process maps templates and supporting change management tools as often as needed;
Assist in the development of training material in support of Policy adoption enterprise wide; participate in compliance training workshops as needed;
Report control issues and follow up on noncompliances with Functional leadership to mitigate and close the issues
Audit event coordination Audit liaison and issue closure oversight (SOC 2 Type 2 ISO 27001 etc.
Lead preaudit preparation activities with stakeholders (SOC 2 Type 2 ISO 27001 etc.
Monitor compliance with existing Policies and supporting tools;
Generate regular reports for Senior Management
Ensure that compliance & audit activities associated are regularly reviewed to drive continuous improvement: providing Subject advice making recommendations and interventions as appropriate
Participate in client directed audit and compliance initiatives including but not limited to SOC 2 Type II ISO 27001 etc.
Champion and lead a culture of customer service and continuous improvement ensuring that opportunities for process and service Improvements Monitor performance and identify areas for improvement Actively look for ways of smoothing peaks and troughs and reducing time scales.
Requirements
BS/BA with record of high academic achievement in CS/MIS
Professional certifications like CISSP (Certified Information Systems Security Professional) CISA (Certified Information Systems Auditor) CISM (Certified Information Security Manager) CGEIT (Certified in the Governance of Enterprise IT) or CRISC (Certified in Risk and Information Systems Control) are desirable
Eagerness to contribute in a teamoriented environment
Ability to work methodically and analytically in a quantitative problemsolving environment
Excellent leadership communication and organizational skills
Strong customer service skills
Working knowledge of various control frameworks like:
ISO/IEC 27002:2005 Code of Practice for Information Security Management
HIPAA HITECH Health Insurance Portability and Accountability
SOC 2 Type II
NIST CSF National Institute of Standards and Technology
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.