Information Security Compliance Program Manager
Information Security Compliance Program Manager
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
$ 134400 - 231000
1 Vacancy
Job Description
Employee Applicant Privacy Notice
Who we are:
Welcoming collaborative and having the opportunity to make an impact - is how our employees describe working here. Galileo is a financial technology company that provides innovative and revolutionary software products and services that power some of the worlds largest Fintechs. We are the only payments innovator that applies tech and engineering capabilities to empower Fintechs and financial institutions to unleash their full creativity to achieve their most inspired goals. Galileo leads its industry with superior fraud detection security decision-making analytics and regulatory compliance functionality combined with customized responsive and flexible programs to accelerate the success of all payments companies and solve tomorrows payments challenges today. We hire energetic and creative employees while providing them the opportunity to excel in their careers and make a difference for our clients. Learn more about us and why we work here at The Role
The Governance Risk and Compliance (GRC) team handles a wide range of cross-functionalactivities from security compliance certifications and audits to risk management inbound and outbound due diligence third party risk management security awareness policy andprocedures and more.
Each of these ongoing parallel activities entails interpreting and setting requirements assessing the effectiveness of security controls risk-based decision making cross-functional collaboration and communication and staying up-to-date on security best practices and how changes in the evolving threat landscape need to inform our strategy.
We are seeking an experienced Security Compliance Program Manager responsible for monitoring and governing security controls in the cloud based on regulatory/compliance requirements and industry standards. Candidates must be able to assimilate knowledge quickly understand stakeholders business challenges/risks and act as a trusted advisor to lead change policy adoption and monitor compliance against policies and standards.
Key job responsibilities:
- Own and manage ongoing cybersecurity audits and assessments including SOC 2 GLBA NYDFS SOX and other regulatory or client-driven reviews
- Serve as the primary liaison between internal stakeholders (i.e. Cybersecurity Technology Internal Audit HR Legal etc.) and external auditors regulators and third-party assessors
- Monitor compliance with cybersecurity policies and standards and assess security compliance risks for bank scoped products processes and technologies
- Partner with stakeholders to conduct walkthroughs and create process maps for critical cybersecurity processes facilitating in risk and control identification and ensure theenvironment is operating safely and in control
- Translate technical controls and requirements into audit-ready evidence and work with technical teams to align implementations with compliance expectations
- Support regulatory third party attestation and Internal Audit audit readiness activities ensuring control design and execution meet internal policy and external regulatorystandards
- Communicate clearly and effectively with both technical and non-technical audiences including executives control owners and external assessors.
Minimum qualifications
- BS degree in Computer Information Systems or related field
- 7 years of experience with security GRC initiatives
- Experience with regulatory cybersecurity compliance examinations
- Substantive and current knowledge of transaction banking compliance consumer and commercial lending deposit wires cards and privacy regulations applicable to banks
- Experience with onboarding and monitoring cybersecurity controls in cloud environments specifically AWS
- Experience managing SOC2 PCI DSS SOX ITGC GLBA or other compliance standards and framework programs
- Strong knowledge of security risk management and running audits/certification programs
- Self-starter with strong interpersonal and communication skills
- Demonstrate ability to assimilate new knowledge quickly
- Comfortable working in a fast-paced dynamic environment and managing multiple projects concurrently
- Experience with managing programs in GRC tools
Preferred qualifications
- Banking/Fintech Big 4 or management/IT consulting experience
- Direct experience with regulatory cybersecurity compliance examinations
- Relevant certification (e.g. CISA CISSP PCI QSA AWS certifications) or equivalent expertise
- Have knowledge of Fedline solution security and resiliency assurance program NIST 800-53/800-37 NIST CSF SOC 2 PCI NYDFS NYCRR PART 500 and/or ISO 27001 standards integrated controls framework and evaluating design and effectiveness of IT controls working directly with auditors regulators investors
- Experience in building successful compliance programs for banks or fintech
- Experience defining compliance roadmaps based on customer requirements compliance documentation and ensuring that committed assessments are delivered onschedule
- Technical fluency; comfortable understanding and discussing technology concepts experience evaluating tradeoffs and new opportunities with technical team members
US-Based Base Compensation
$134400 - $231000 USD
Galileo Financial Technologies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race color religion (including religious dress and grooming practices) sex (including pregnancy childbirth and related medical conditions breastfeeding and conditions related to breastfeeding) gender gender identity gender expression national origin ancestry age (40 or over) physical or medical disability medical condition marital status registered domestic partner status sexual orientation genetic information military and/or veteran status or any other basis prohibited by applicable state or federal law.
The Company hires the best qualified candidate for the job without regard to protected characteristics.
Pursuant to the San Francisco Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.
New York applicants: Notice of Employee Rights
Galileo is committed to embracing diversity. As part of this commitment Galileo offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process please let your recruiter know or email .
Due to insurance coverage issues we are unable to accommodate remote work from Hawaii or Alaska at this time.
Required Experience:
Manager
Employment Type
Full Time
