IT Compliance Manager

Revenue Management Solutions LLC•Oklahoma City, OK

10d

About The Position

The IT Compliance Manager is responsible for ensuring that the company conducts its business in compliance with applicable national laws and regulatory requirements. The role creates, reviews, enforces, and oversees company policies, procedures, and industry best practices to support a strong culture of compliance and ethical operations. The position conducts compliance and risk assessments, including internal control testing; supports external audits, regulatory inquiries, and legal requests; manages third-party vendor risk; oversees incident and breach response; and maintains SOC 2 controls, documentation, and evidence. It also develops and enforces policies concerning PHI, data classification, encryption, access controls, and data retention; coordinates regulatory and privacy aspects of incident response; evaluates business systems for compliance; and leads compliance training and security awareness initiatives. The role partners with cross-functional leaders, tracks remediation to validate control effectiveness, and performs other related duties as assigned. The work takes place in an indoor, climate-controlled environment with moderate to quiet noise levels. The employee regularly communicates verbally and in writing, uses a laptop and other electronic devices, and may need to lift or move up to 20 pounds. Close and distance vision are required.

Requirements

Working knowledge of applicable regulatory frameworks, such as HIPAA, SOC 2, ISO 27001, or industry-specific standards.
Experience supporting audits, regulatory examinations, and control assessments.
Strong understanding of risk management principles and internal control design.
Excellent analytical, problem-solving, and documentation skills.
Strong written and verbal communication skills, including the ability to interface across technical and non-technical teams.
Proficiency with Microsoft Office and compliance documentation tools.
Bachelor’s degree in business, Legal Studies, Compliance, Information Security, Risk Management, or a related field.
3–5+ years of experience in compliance, risk management, audit, or information security.
Demonstrated experience developing or maintaining policies, conducting risk assessments, and supporting remediation efforts.
Familiarity with industry regulations and regulatory reporting requirements relevant to the organization.
Applicants are subject to drug screens and background checks per company policies.

Nice To Haves

Professional certifications such as CISSP, CISM, CISA, CRCM, CCEP, or similar are preferred.

Responsibilities

Conduct compliance and risk assessments, including internal control testing.
Prepare for and respond to external audits, regulatory inquiries, and legal requests.
Manage third-party vendor risk assessments and ongoing monitoring.
Oversee incident and breach response, including investigation, notification, and remediation.
Maintain and enhance SOC 2 controls, documentation, and evidence management.
Track and validate remediation efforts to ensure control effectiveness.
Develop and enforce policies related to PHI, data classification, encryption, access controls, and data retention.
Coordinate regulatory and privacy aspects of incident and breach response and ensure notification obligations are met.
Evaluate business systems and operations for regulatory and ethical compliance.
Draft, update, and implement corporate compliance policies and procedures.
Lead mandatory compliance training programs, such as security awareness and HIPAA training, and manage LMS tracking and reporting.
Conduct phishing simulations and targeted security awareness initiatives.
Partner with cross-functional leaders to ensure operational compliance.
Perform other related duties as assigned.