The Security Compliance Operations Specialist operates within the Policy & Control Operations sector of the Information Security (IS) organization to provide support day-to-day operational guidance of the security component to the identity and access management programs. This individual will train teams on all security compliance methodologies, develop support, and implement improvements on current and future processes with limited oversight. The role will work closely with all teams within Governance, Risk, and Compliance, as well as collaborate with other business stakeholders for implementation, development, and maintenance activities and maturity targets. The successful candidate will apply existing expertise to develop and implement new and updated business processes for Compliance Operations. They will develop and propose strategies to limit company exposure. This function is a main point of contact for internal and external customer service.

The work

• Serves as a subject matter expert for the department in financial audit practices. Prepares and reviews audit report before presentation to management.
• Gathers and organizes background and other information to properly plan the audit and any special reviews.
• Responsible for overseeing process to review exceptions to policies and standards including data gathering and reviews with leadership.
• Leads kickoff, closing, and other client meetings; presenting observations and conclusions relevant to work performed.
• Assists manager in the management and administration of the annual certification process that is required by the Sarbanes-Oxley Act and other federal requirements, as needed.
• Leads control reviews on new processes and procedures or participates as a team member on projects related to the improvement of the control environment.
• Monitors the development and progress of direct report(s) including evaluating, training, motivating, and coaching.
• Develops relationships with management personnel to build rapport and serves as a controls expert or consulting resource on control issues throughout the organization, including company initiatives or system implementations.
• Develops, presents and works with business units to implement value-added recommendations to strengthen internal controls, prevent fraud and improve operating processes.
• Work cross-functionally with Architects, Engineers, Product Owners, and other Security Specialists.
• Execute service reports and gather data for metrics.
• Document changes, enhancements, and lifecycle events.

What you need

• Bachelor’s Degree in Computer Science, Business Computer Systems, Management Information Systems, or high school degree with 10+ years in equivalent work experience.
• Experience with ServiceNow
• Familiarity with SOX, NIST publications, and CMMC requirements

Bonus if you have

• Ability to identify and manage technical issues of various platforms, applications, and systems, and plan solutions to problem resolution according to standardized processes
• Experience with Linux/Unix, Windows, scripting (with programming languages such as Bash, PowerShell, Perl, or Bash), SQL, LDAP, and web services.
• Experience with Privileged Access Management (PIM / PAM), Single Sign-On (SSO), and Multi Factor Authentication (MFA).
• Certifications: Security +, CISSP, CEH, CISA, CRISC, CISM