Audit & Compliance Manager

Mid / Senior

|

Hybrid

Meytier Premier Employer

Apply NowAppliedThis job might no longer be active.

Working there

{"group":"Organization","title":"Audit & Compliance Manager","zohoId":"557706000013380599","endDate":"2022-04-30T00:00:00.000Z","jobType":"Full Time","job_url":"414-ownbackup-audit-compliance-manager","agencyId":1,"location":[{"lat":40.7548065,"lon":-74.06819879999999,"city":"Jersey City","text":"Jersey City, NJ 07097, USA","state":"New Jersey","country":"United States","zipCode":"07097","is_state":false,"is_country":false,"state_code":"NJ","countryCode":"US","isLocationSet":true,"loc_h3_hex_res4":"842a107ffffffff","isLocationResolved":true,"is_address_available_from_parser":true}],"maxSalary":null,"minSalary":null,"startDate":"2022-03-21T00:00:00.000Z","onBehalfOf":"52","description":"<span id=\"spandesc\"><div class=\"align-justify\" style=\"text-align: justify\"><b>Location:&nbsp;</b>Englewood Cliffs, NJ<br /></div><div class=\"align-justify\" style=\"text-align: justify\"><br /></div><div class=\"align-justify\" style=\"text-align: justify\"><b>Key Responsibilities:</b><br /></div><ul><li class=\"align-justify\" style=\"text-align: justify\"><span>Lead the interactions with information security audit and assessments, manage relevant regulatory requirements, assist in the development of management responses, track, and monitor remediation progress till closure. <br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Provide support to customer audits and other security and compliance assessments, questions, and interactions with prospective customers.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Provide oversight of identifying, classifying, remediating, and mitigating risks and vulnerabilities and the policy exception request process.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Support the day-to-day operations by identifying potential areas of cybersecurity compliance risks by performing risk assessments, and ensuring appropriate escalation and coordination of effective corrective actions.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Conduct an analysis of internal policies, guidelines, procedures, and processes to evaluate the accuracy and adequacy of internal controls, operations, and reporting in the area of information security programs and processes impacting regulatory compliance requirements as needed.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Collaborate with various technical and non-technical teams to evaluate the effectiveness of security controls, identify and categorize risks, provide improvement recommendations, and communicate outcomes of those activities.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Gather requested artifacts (related to the evaluation of security controls described above, as well as other evidence of adherence to privacy and security controls)<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Communicate emerging issues, potential risks, and audit results to key stakeholders, assist in the review, and formulate responses to issues and findings from all sources.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Work closely with business, technology, and compliance counterparts to understand business objectives, initiatives, and ensure alignment with security policies and best practices.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Contribute in the development of security policies and standards.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Participate in risk assessment and strategic planning and continuous improvement of the risk and compliance program.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Assist in the development of metrics and reports that provide management visibility into the current cyber risk and compliance posture and trends.<br /></span></li></ul><div class=\"align-justify\" style=\"text-align: justify\"><b>Desired Profile:</b><br /></div><ul><li class=\"align-justify\" style=\"text-align: justify\"><span>Bachelor&#39;s Degree in Computer Science, Information Technology or other relevant fields <br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>5+ years of Cyber Risk working experience. Prior information security consulting experience preferred.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Well versed with Technologies and continuous compliance requirements for SOC, ISO, NIST, CIS,&nbsp; CCPA, GDPR, GxP/GmP and others.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Experience in FedRAMP, French HDS, Australian IRAP, and other international regulatory compliance for privacy and cybersecurity is a plus.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Must have strong experience with enterprise compliance enforcement, defining and driving related programs and performing risk assessments.<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Expertise working with risks and internal controls<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>CISA or other certifications preferred (CPA, CISSP, CIA, CISM, etc.)<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Experience using GRC and/or document management tools, particularly ZenGRC is a plus<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Ability to build and develop strong relationships<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Strong leadership skills with the ability to foster an environment of collaboration and excellence<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Effective verbal and written communication, and presentation skills including comfort with executive audiences<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Strong attention to detail with the ability to think from a “big picture” perspective<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Creativity, confidence, and flexibility<br /></span></li><li class=\"align-justify\" style=\"text-align: justify\"><span>Team player with a great sense of humor!<br /></span></li></ul></span><br />","isHybridJob":true,"isRemoteJob":false,"noOfOpenings":1,"maxExperience":"10","minExperience":"5","isOnPremiseJob":false,"onBehalfOfName":"OwnBackup","otherlocations":[],"zohoCurrencyIn":"USD","experienceLevel":"Mid / Senior","zohoNoOfOpenings":{"noOfOpenings":1,"fulfillmentIds":["557706000013380599-1"]},"otherJobReference":null,"sharpenedJobTitle":"Audit & Compliance Manager","job_category_group":3,"portalLocationDisplay":"Jersey City NJ","expertise_coreskill_or_product":["Other"],"job_id":"2391"}