Senior Manager, IT Risk & Compliance
Core
Strategic leadership and hands-on execution to mature IT risk, compliance, and governance programs, ensuring confidentiality, integrity, and availability of information assets while enabling business objectives.
Role type
Senior Manager, IT Risk & Compliance
Builds
Enterprise security compliance programs, PCI DSS compliance lifecycle, technical resiliency programs, third-party risk management, security awareness initiatives, and cyber risk management processes.
Domain
Healthcare/Pharmaceutical (Patterson) + Information Security & Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
Enterprise risk and compliance program management, PCI DSS compliance lifecycle ownership, technical resiliency and disaster recovery planning, third-party risk management, security awareness program design, regulatory engagement (HIPAA, PCI, SOX), cyber risk assessment and governance, executive dashboarding and risk reporting, team leadership and development
Preferred skills
GRC platform administration (ServiceNow, Vanta), cybersecurity frameworks (NIST, ISO 27001, SOC 2), automation and AI for risk operations
Technologies
ServiceNow GRC, Vanta, NIST, ISO 27001, SOC 2
Responsibilities
Lead and execute security compliance programs owning the full lifecycle of control design and improvement; Own the enterprise PCI DSS compliance program from end to end; Lead the technical resiliency program by identifying critical systems and validating recovery requirements; Execute and enhance the third-party risk management program; Drive a high impact security awareness program; Lead external assessments and regulatory engagements; Own enterprise cyber risk management processes and maintain executive dashboards; Lead, coach, and develop a high performing security risk and compliance team
Seniority
Senior, hands-on IC with people leadership
