Compliance Manager/Audit - Virtual

Alight•Virtual, MI

12d•$98,000 - $112,000•Remote

About The Position

As a member of Alight Global Security’s Security & Compliance team, this position will provide help manage audits and their applicable controls. With a deep understanding of leading audits, this role, will provide guidance to subject matter experts within Alight on what they need to do to meet and demonstrate each control and help speak to and present collected evidence with various external auditors. Additionally, this role would lead any necessary gap assessments, compliance readiness, and compliance monitoring activities through internal audits.

Requirements

Bachelor’s degree in Information Systems, Cybersecurity, or a related field and minimum 6 years of relevant experience. Additional years of relevant experience will be considered in lieu of a degree.
Experience in audit frameworks (ie SOC/ISO)
Willingness to work outside of regular business hours as required which can include evenings, weekends, and holidays.
Ability to handle and maintain the integrity and confidentiality of highly sensitive material and information
Must excel working in team-oriented roles that rely on ability to collaborate with others
MS Office and project management skills;
Prior experience of information security, programming, IT risk management or audit preferred
Experience working with auditors and/or regulators preferred
Knowledge of NYDFS, HIPPA, PII, and GDPR requirements preferred
Interest in developing knowledge in security and interactions with various internal and external client functions

Nice To Haves

Certifications in line with Cybersecurity and/or Project Management a plus
Demonstrated experience in working in a geographically dispersed team with global scope and responsibilities
Experience facilitating business process design as it relates to managing identities and access privileges
CISA certifications beneficial

Responsibilities

Perform all audit attestation activities relating to aligned audits ensuring work and deliverables in accordance with agreed upon timeframes and organizational procedures, standards, and protocols
Interpret patterns of non-compliance discovered through audit to determine impact on levels of risk and work with the appropriate resources to drive higher levels of compliance.
Owns and manages any gaps coming from their audit process through remediation with stakeholders reporting milestones and escalate when necessary
Work with internal subject matter experts to lead them in understanding the controls and required evidence
Partners cross-functionally, inter-departmentally and with the external auditor to understand the process from an end-to-end perspective and appropriately and effectively communicates with these partners
Ensures frequent communication of test and/or audit results and analysis on a timely basis to the appropriate stakeholders and senior management within the audit department
Through the advanced use of technology (i.e. MS Excel, Corporation’s Proprietary Insurance Enrollment & Administration System.) concisely measure, monitor and report metrics to senior management of the audit department and prepare snapshots of information in a synthesized and polished manner
Design, implement & mature security and risk management controls library, controls methodology & testing criteria;
Responsible for staying current on regulatory rules and changes within the industry
Leads and/or actively participates in meetings with business unit to discuss test and/or audit scoping, testing progress and results
Interacts and partners with senior management to understand the risks within the business, business changes and other significant events that could significantly impact the business and/or the audit plan
Communicates with regulators, external auditors, and various risk management committees within the Corporation as part of ongoing continuous monitoring which assists in managing the audit plan