- Company Name
- EDZ Systems
- Job Title
- IT Regulatory Compliance Program Manager
- Job Description
-
**Job Title:** IT Regulatory Compliance Program Manager
**Role Summary:**
Leads and coordinates enterprise‑wide IT regulatory compliance, risk, and governance programs. Partners with IT, business, finance, risk, audit, and compliance teams to assess, design, and monitor controls across frameworks such as NIST, COBIT, COSO, and SOX. Drives remediation, automation, and continuous improvement of ITGC, data‑integrity, and privacy controls to meet CMMC, NYDFS, CCPA, PCI, and other regulatory requirements.
**Expectations:**
- Collaborate cross‑functionally and influence stakeholders at all levels.
- Conduct complex analyses, identify risks, and deliver clear, defensible recommendations.
- Communicate technical findings and compliance frameworks in concise, non‑technical language.
- Lead remediation efforts and monitor ongoing risk reporting.
- Proactively seek automation opportunities to enhance control effectiveness.
**Key Responsibilities:**
- Provide day‑to‑day operational support for CMMC, NYDFS, CCPA, PCI, and related privacy/security regulations.
- Develop and maintain enterprise IT operational risk and GRC frameworks, methodologies, and tools.
- Align policies and procedures with evolving regulatory guidance; train and inform stakeholders.
- Assess end‑to‑end technology processes, design system architectures, and document risk/control matrices.
- Identify IT and financial risks; design and implement ITGC, data‑integrity, and financial controls using GRC platforms (e.g., Aurora/Archer).
- Create and update control documentation, flowcharts, narratives, and risk matrices for new or modified systems.
- Automate controls through analytics and cross‑team partnerships.
- Validate IT control designs and facilitate internal/external audit engagements.
- Diagnose root causes of control deficiencies; develop and execute remediation plans with IT Operations, Product, InfoSec, and compliance teams.
- Oversee first‑line risk monitoring and produce regular risk‑control reports for IT leadership.
**Required Skills:**
- Strong knowledge of NIST, COBIT, COSO, SOX, and related governance frameworks.
- Experience with GRC tools (e.g., Aurora/Archer).
- Proficient in Microsoft Office, Visio (including data‑flow diagramming), and Project.
- Internal audit and internal controls expertise.
- Ability to translate technical analysis into clear business communication.
- Familiarity with security tools such as Imperva and Tripwire agents.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Technology, Information Systems, Accounting, Business, or related field.
- 4–7 years of experience in an IT environment, preferably within government or privacy program settings.
- Preferred certifications: Certified Information Systems Auditor (CISA); Certified Information Systems Security Professional (CISSP).
Kansas city, United states
On site
Junior
02-10-2025