Document and address organization's information security audit and compliance requirements and standards.
Develops, maintains, and communicates the organization’s information security policy and procedures
Directs and oversees the assessment, selection, implementation, and maintenance of information security tools and technologies
Evaluate new or updated industry regulations to ensure continued compliance
Enforces information security controls and investigates/responds to information security incidents
Participates in business continuity planning (BCP) activities when required by regulation or senior leadership
Prepares reports, business cases, and presentations on security risk, controls, the status of compliance efforts, etc.
Acts as liaison between IT and other functions (e.g., legal) regarding information compliance and/or audits
Assist ISL in the collaboration on SSP's
Assist ISL in the determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.

At least 5 years’ experience working in industry as a Security Compliance Auditor
CISA, CEH, PMP, CISM, CRISC or CISSP certification
Advanced knowledge of the security and auditing regulations (HIPAA, NIST, SOC, etc..)
Well-versed in industry regulations and have the ability to translate complex security concepts into layman’s terms
Ability to work effectively in diverse, multi-national and virtual environments
Self-motivated and tenacious
Demonstrate sound judgment and integrity
Ability to influence delivery personnel in the execution of security and compliance requirements
Experience of translating contractual security requirements to deliverables

IT Security Compliance Assurance Manager – CAM

Key skills