Information Technology Compliance Manager - Audit & Risk Management

We are seeking an experienced and detail-oriented IT Compliance Manager to lead and manage our organizations IT compliance programs.

The ideal candidate will ensure adherence to applicable regulatory requirements, industry standards, and internal policies while supporting risk mitigation and process improvement initiatives across the IT function.

This role requires strong knowledge of IT governance frameworks, regulatory landscapes, and compliance auditing practices.

Key Responsibilities :

Compliance Oversight :

- Ensure compliance with relevant regulatory frameworks (e.g., GDPR, HIPAA, SOX, ISO 27001, PCI-DSS, NIST).

- Monitor adherence to internal IT policies and external legal and regulatory obligations.

Audit and Risk Management :

- Conduct periodic risk assessments and gap analyses; define remediation plans and track to closure.

- Liaise with auditors, regulators, and third parties to demonstrate compliance posture.

Policy Management :

- Conduct policy reviews in collaboration with legal, cybersecurity, and IT stakeholders.

Training & Awareness :

- Promote awareness of compliance and security best practices across the organization.

Reporting & Documentation :

- Prepare and present regular compliance reports to senior leadership and relevant committees.

Vendor & Third-Party Management :

- Ensure proper due diligence and contract compliance from third-party service providers.

Change Management & Incident Response :

- Collaborate with cybersecurity teams in response to incidents and breaches, ensuring proper reporting and documentation.

Requirements :

Education & Experience :

- Bachelors degree in Information Technology, Computer Science, Cybersecurity, or a related field.

Certifications (Preferred) :

- CRISC (Certified in Risk and Information Systems Control)

- CISSP (Certified Information Systems Security Professional)

- ISO 27001 Lead Auditor/Implementer

Technical & Professional Skills :

- Familiarity with data privacy regulations such as GDPR, CCPA.

- Experience working with GRC tools (e.g., RSA Archer, ServiceNow GRC).

- Excellent analytical, communication, and project management skills.

- Ability to work collaboratively across technical and non-technical teams.

- Strong attention to detail, with an ability to manage multiple compliance projects simultaneously