IS Risk and Compliance Manager

BlueCross BlueShield of South Carolina•Columbia, SC

2d•Hybrid

About The Position

Manage the internal risk assessment and compliance function to ensure Information Services (I/S) complies with government and industry regulations. Work with corporate and I/S Risk Management teams to develop and implement internal control policies across a wide range of I/S processes. This is a full-time hybrid position, 40 hours per week, Monday through Friday, in a typical office environment. The schedule is an eight-hour shift during normal business hours, with extended hours potentially required based on business needs. The role is located at 2401 Faraway Drive, Columbia, South Carolina, and may require travel between buildings. The position is not eligible for sponsorship now or in the future and requires U.S. citizenship to obtain a security clearance, as well as CMS clearance. The manager oversees staff hiring, coaching, performance evaluation, and disciplinary matters, and supports professional development, training, career growth, morale, and employee satisfaction. The role promotes regulatory compliance and I/S best practices, particularly in information security and risk mitigation. It conducts risk and compliance assessments, prepares reports and recommendations, oversees risk management and compliance across I/S functional areas, and coordinates audit responses and control ownership. The manager also monitors applications and infrastructure for compliance with department standards and oversees the development and maintenance of regulatory documentation and departmental policies and procedures.

Requirements

Bachelor's degree, or an equivalency of four additional years of job-related work experience, or an associate degree plus two additional years of job-related work experience.
Seven years of job-related IT experience.
Prior team lead, supervisor, or management experience, or equivalent military experience at grade E4 or above.
Knowledge of business and management principles, including strategic planning, resource allocation, human resources modeling, leadership techniques, production methods, and coordination of people and resources.
Ability to identify complex problems, review relevant information, develop and evaluate options, and implement solutions.
Flexibility in adapting to changing business and client needs and a changing technical environment.
Strong technical knowledge in a related area.
Strong interpersonal and oral and written communication skills.
Demonstrated analytical and decision-making skills.
Effective communication, customer service, and time-management skills.
Ability to communicate complex information clearly to audiences with different levels of experience and knowledge.
Ability to use general word-processing, database, and spreadsheet applications.
Ability to use standard office equipment, including a phone, copier, fax, and computer.
U.S. citizenship to obtain the required security clearance; CMS clearance is also required.

Nice To Haves

Strong managerial skills.
Understanding of risk management.
Ability to communicate with executives.
Understanding of artificial intelligence.
Understanding of organizational policies and procedures.
Strong collaboration skills.
CompTIA Security+ certification.
ISACA Certified Information Security Manager (CISM) certification; certifications must be obtained within one year of hire.

Responsibilities

Recruit, hire, coach, mentor, monitor, and evaluate staff, and address disciplinary issues in a timely manner.
Support employee morale and satisfaction through professional development, training, career growth, and recognition of high performance.
Promote compliance with regulatory requirements and I/S best practices, particularly information security and risk mitigation.
Work with System Security Officers to interpret changing security and compliance regulations and assess their impact on I/S.
Manage and conduct risk assessment and compliance activities and prepare assessment reports.
Recommend risk mitigation, process, control, and cost improvement approaches.
Provide oversight of risk management and compliance activities across I/S functional areas.
Meet with auditors, prepare management responses, identify security control owners, ensure appropriate staff attend audit meetings, and review final reports for accuracy.
Monitor activities to ensure customer expectations and requirements are met and applications and infrastructure comply with department standards.
Oversee development and maintenance of regulatory documentation.
Review departmental documentation, policies, and procedures for accuracy, completeness, and relevance to company goals.