IS Risk and Compliance Manager

BlueCross BlueShield of South Carolina•Columbia, SC

2d•Hybrid

About The Position

The IS Risk and Compliance Manager manages the internal risk assessment and compliance function to ensure Information Systems (I/S) complies with government and industry regulations. The role works with corporate and I/S Risk Management teams to develop and implement internal control policies across a variety of I/S processes. It is a full-time, hybrid position based at 2401 Faraway Drive, Columbia, South Carolina, with a Monday–Friday schedule of 40 hours per week and an eight-hour shift during normal business hours. Extended hours may be required based on business needs, and travel between buildings may be necessary. The position requires U.S. citizenship to obtain a security clearance and also requires CMS clearance. It is not eligible for current or future sponsorship. The manager leads staff recruiting, hiring, coaching, mentoring, performance monitoring and evaluation, and timely handling of disciplinary issues. The role promotes professional development, training, career growth, high performance, morale, and employee satisfaction. It oversees risk assessments, compliance activities, regulatory documentation, and controls across I/S, and works with System Security Officers on changing security and compliance requirements. The position also engages with auditors, coordinates audit responses and control owners, and monitors applications and infrastructure for compliance with departmental standards. The work environment is fast-paced and multi-platform, and may require action and response 24 hours a day, 7 days a week, to support customer technical business needs.

Requirements

Bachelor's degree, or an accepted equivalent: an additional four years of job-related work experience, or an associate degree plus an additional two years of job-related work experience.
Seven years of job-related IT experience.
Prior team lead, supervisor, or management experience, or equivalent military experience at grade E4 or above.
Knowledge of business and management principles, including strategic planning, resource allocation, human resources modeling, leadership techniques, production methods, and coordination of people and resources.
Ability to identify complex problems, review related information, develop and evaluate options, and implement solutions.
Flexibility to adapt to changing business and client needs and a changing technical environment.
Strong technical knowledge in a related area.
Strong interpersonal, oral, and written communication skills.
Analytical and decision-making skills.
Effective communication, customer service, and time-management skills.
Ability to explain complex information clearly to audiences with varying levels of experience and knowledge.
U.S. citizenship to obtain the required security clearance; CMS clearance is also required.
Ability to use general word-processing, database, and spreadsheet applications and standard office equipment.

Nice To Haves

Strong managerial skills.
Understanding of Risk Management.
Ability to communicate with executives.
Understanding of AI.
Understanding of organizational policies and procedures.
Strong collaboration skills.
CompTIA Security+ certification.
ISACA Certified Information Security Manager (CISM) certification.
Preferred certifications must be obtained within one year of hire date.

Responsibilities

Recruit and hire staff; coach and mentor employees; monitor and evaluate performance; and address disciplinary issues in a timely manner.
Support professional development, training, career growth, and recognition of high performance to promote morale and employee satisfaction.
Promote compliance with regulatory requirements and I/S best practices, particularly in information security and risk mitigation.
Work with System Security Officer(s) to interpret changing security and compliance regulations and assess their impact on I/S.
Manage and conduct risk assessment and compliance activities, prepare assessment reports, and recommend risk mitigation, process, control, or cost improvements.
Oversee risk management and compliance activities across I/S functional areas.
Meet with auditors, prepare management responses, identify security control owners, ensure appropriate staff attend audit meetings, and review final reports for accuracy.
Monitor activities to ensure customer expectations and requirements are met and applications and infrastructure comply with department standards.
Oversee development and maintenance of regulatory documentation.
Review departmental documentation, policies, and procedures for accuracy, completeness, and relevance to company goals.