Sr. Manager Risk & Compliance

IT Risk and Compliance Manager
Alpharetta GA
3 Months Contract with possible extension

Working Hours: 8:00am to 5:00pm

Job Responsibilities:
Principle Accountabilities:
Serve as the primary point of contact in IT for risk and compliance cybersecurity controls.
Lead the development of a risk-based approach for the client organization for the areas of security and compliance.
Create and conduct risk assessments for various IT areas and develop action plans based off risk analyses.
Serve as the liaison for IT as part of both internal and external audits. Work with Client’s Internal Audit department, Internal Controls department, and the external audit team to facilitate IT audits, assessments of organizational risk, and remediate activities.
Development and documentation of operating policies and procedures to ensure regulatory compliance and leading security practices to meet compliance needs.
Collaborate with cross-functional teams to implement compliance initiatives and security controls.
Develop IT programs to monitor the effectiveness of control operations, including collecting and reviewing evidence of control operation, conducting periodic audits of compliance processes, and communicating results to IT Management.
Monitor and track activities related to control remediation or corrective action. Partner with business and IT teams to develop and deliver risk mitigation plans, implement additional control activities, or document risk acceptance.
Work with cross-functional teams to deliver on the enterprise’s data privacy program. Partner with business and IT leads to design and implement practices around secure data management and controls.
Ensure enterprise-wide compliance in various programs, such as HIPAA, PCI, privacy, etc