10393 - IT Governance, Risk & Compliance (GRC) Manager

Job Description

Job Description

10393 - IT Governance, Risk & Compliance (GRC) Manager

SUMMARY

The IT Governance, Risk & Compliance Manager is responsible leading a team of professionals and for working with the HAEA and Business Unit Leadership team, Information Security, Legal, Audit and other relevant departments to analyze and implement Information Security and Risk Management frameworks, policies, standards and best practices.  This includes translating industry, government (local and federal) and contractual compliance requirements into the frameworks, policies, standards and processes.  Supports and coordinates internal and external audits in the areas of IT, information security, risk management & compliance.  Coordinate remediation of non-compliant areas of IT.  Provide assistance in the development / implementation of IT security awareness programs for both technical and non-technical audiences

ESSENTIAL FUNCTIONS

• Responsible for identifying, selecting, retaining, mentoring, managing and training GRC personnel on a daily basis along with reviewing performance, allocating raises and supporting promotions.
• Will manage department projects, budgets, vendors and associated administrative support required to accomplish same.
• As part of IT Governance, Risk & Compliance (GRC) within the Information Security department, provides support of and is responsible for analyzing and implementing Information security, risk management, application security frameworks, policies, standards and processes.
• As part of IT Governance, Risk & Compliance (GRC) within the Information Security department, provides support of and is responsible for analyzing and implementing Information security, risk management, application security frameworks, policies, standards and processes.
• Executes regular or scheduled compliance tasks as assigned, summarizing and reporting findings, ensuring that audit issues and associated root causes are understood, well defined and presented to HAEA (IT) and business unit (CBU) leadership.
• Maintains relationships with internal and external audit and compliance agencies to facilitate execution of audits.
• Acts as the liaison between IT and external audit firms to assist in scheduling and resource planning for audits.
• Supports and coordinates internal and external audits for the areas of IT and information security.
• Coordinates remediation activities for non-compliant areas of IT.
• Performs IT project, application security and vendor risk assessments, to ensure compliance with the corporate information security policies and standards.
• Assists in the implementation of IT security awareness programs for both technical and non-technical audiences.
• Provides periodic updates, education and presentations to staff and management on various aspects of IT Governance, Risk and Compliance.
• Support other department initiatives and deliverables as needed

REQUIREMENTS

Salary Range - $112,830 -$173,756

Powered by JazzHR

EwzYcoNApM