Technology Risk and Compliance Manager
The Technology Risk and Compliance Manager engages in activities to support USCC's information security compliance and risk requirements, Payment Card Industry Data Security Standard for credit card transactions, as well as supporting the Chief Privacy Officer in ensuring compliance to Customer Proprietary Network Information standards. Additionally, the Manager ensures that IT security compliance and risk management support Enterprise business objectives. Assist and support the Senior Manager of Technology, Governance, Risk & Compliance, in driving and maintaining the implementation and maintenance of framework that manages governance, risk and compliance objectives. Provide PCI subject matter expertise for annual PCI Report on Compliance, or other PCI controls and activities that require this expertise. Provide CPNI subject matter expertise for CPNI Technology and Engineering control quarterly testing. Provide SOX 404 subject matter expertise for all testing of SOX controls. Ensure identified control issues are documented in remediation plans. Document and report the status of remediation items, their owners and the commitment dates for closure. Collaborate with Chief Privacy Officer in matters relating to information security requirements of third party contracts; interface regularly with internal and external counsel; and facilitate CPNI compliance objectives within the technology organizations. Participate in annual SOX audit with external auditor and provides in-depth insight into USCC's TOPS financial system. Lead organizational awareness of compliance, risk, security and privacy concepts and best practices. Demonstrate to the organization how effective risk management practices enable compliance and business process efficiency. Review new project initiatives and provide input on potential risk, compliance and privacy related requirements. Manage risk management, compliance and security governance activities. Deliver on simultaneous projects and priorities with tight schedules. Leverage appropriate resources to meet objectives. Translate compliance and technical requirements into relevant and understandable terms. Instill trust and credibility with internal and external stakeholders. Effectively partner and collaborate with other Associates, as well as with leaders at all levels of the company. Displays discretion in all internal and external communication. Bachelor's degree in related technical area or equivalent experience. Minimum 5 years of relevant technology experience in multiple information security/technology areas. Basic knowledge of project management methodologies and tools. Impeccable written and verbal communication skills. Experience in leveraging strong interpersonal, influencing and negotiation skills. PREFERRED QUALIFICATIONS Master's degree. Minimum 3 years of risk management and/or compliance experience in wireless industry. Certifications such as:
CISSP, CISA, PCI ISA, CISM, CRISC; CIPP, CIPP/IT.
Salary Range:
$100K -- $150K
Minimum Qualification
Auditing & Compliance, Risk & Quantitative AnalysisEstimated Salary: $20 to $28 per hour based on qualifications.
CISSP, CISA, PCI ISA, CISM, CRISC; CIPP, CIPP/IT.
Salary Range:
$100K -- $150K
Minimum Qualification
Auditing & Compliance, Risk & Quantitative AnalysisEstimated Salary: $20 to $28 per hour based on qualifications.
|
|
 | |
