IT Risk and Compliance Manager - Senior

Position Summary

The Information Security Risk and Compliance Governance Expert is responsible for overseeing the governance framework that supports IPH’s information security, risk management, and compliance initiatives.

This role ensures alignment with regulatory requirements, internal policies, and industry standards.

Key Responsibilities

• Manage cross functional teams to ensure enterprise governance and compliance initiatives align with strategic goals and are met successfully, on time, and within budget.
• Manage cross functional teams to drive successful results on business required SOC 2 Type II audits that directly support revenue growth.
• Manage IPH regulatory engagements, stay abreast of future regulatory requirements and the business impact they may present.
• Manage IPH Enterprise Data Security and Governance initiatives and ensure alignment with regulatory requirements, internal policies, and industry best practice information security standards.
• Ensure compliance with applicable regulations and business requirements (e. g., SOC 2, NYDFS, Delaware Insurance Data Security, PCI, HIPAA, GDPR) and influence executive leadership.
• Manage IPH enterprise data security and governance compliance initiatives.
• Oversee the timely and appropriate data breach communications to partners and clients.
• Create and lead cross functional teams as needed to successfully complete and submit required business partner information security questionnaires.
• Develop and manage IPH information security governance framework.
• Lead board and executive leadership compliance and governance-related initiatives.
• Develop and manage key risk indicators (KPIs) and escalates emerging risks to leadership.
• Analyze governance, risk, and compliance data to identify trends, gaps, and improvement opportunities.
• Work independently on complex enterprise GRC initiatives.
• Mentor junior team members and contribute to team development.
• Stay current with emerging GRC technologies, cybersecurity risks, and regulatory changes.
• Promote a culture of security awareness and risk-informed decision making.

Requirements

• Master’s degree in Information Security, Information Technology Management, Risk Management, or related field.
• Professional certifications such as CISSP, CISM, CRISC, CDPSE, or CISA are preferred.
• 8+ years of experience in information security governance, risk, and compliance leadership roles.
• Strong knowledge of security frameworks and standards (e. g., SOC 2, NIST SP 800‑53, ISO 27001, PCI, HIPAA) and regulatory requirements (e. g., NYDFS, Delaware Insurance Data Security, PCI, HIPAA).
• Extensive experience with enterprise GRC platforms and tools.
• Excellent analytical, communication, and leadership skills.
• Demonstrated ability to effectively manage cybersecurity audits and risk assessments to positive outcomes.
• Preferred Skills
• Ability to manage multiple priorities and work cross‑functionally.
• Expert in developing governance frameworks and reporting structures.
• Strong attention to detail and problem‑solving capabilities.

Benefits

• Comprehensive full medical, dental and vision insurance.
• Basic life insurance at no cost to the employee.
• Company‑paid short‑term and long‑term disability.
• 12 weeks of 100% paid parental leave.
• Health Savings Account (HSA).
• Flexible Spending Accounts (FSA).
• Retirement savings plan.
• Personal paid time off.
• Paid holidays and company‑wide wellness day off.
• Paid time off to volunteer at nonprofit organizations.
• Pet‑friendly office environment.
• Commuter benefits.
• Group pet insurance.
• On‑the‑job training and skills development.
• Employee Assistance Program (EAP).
• #J-18808-Ljbffr