Audit, HIPAA, ISO 9000, IT asset management, IT audit, IT management, Risk management, Compliance, Microsoft technologies, Internal control, Policies, PCI, SAS 70, Senior management
Full Time
Depends on Experience
Position: SR Director of Global Compliance (Permanent/Direct Hire)
Location: Tampa, FL
Duration: Permanent/Fulltime
GENERAL PURPOSE:
This is a highly visible position requiring collaborative engagement and partnership with executive stakeholders, audit firms, and internal leadership. This position is responsible for developing, managing, and delivering a global IT compliance program including IT SOX, HIPAA, SOC, PCI, SSAE 16, and ISO regulatory compliance. Additionally, the position provides direction for remediation, IT monitoring program, and IT asset management and compliance. This position interfaces directly with external audit firms, senior executives, the Audit Committee, and business unit leaders worldwide.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
• Direct and manage the activities of internal resources assigned to execute IT audits.
• Evaluate internal controls, business processes, and physical environments using sound audit practices, skills and techniques to ensure areas of material risk are provided appropriate levels of audit coverage and remediation.
• Position the company for successful third-party compliance audits and recommend program designs to enhance compliance efficiencies while reducing the costs of IT compliance.
• Develop and maintain a global regulatory engagement framework including policies, procedures, and protocols.
• Serve as a key liaison with external audit firms to ensure adherence to generally accepted audit standards and methodologies relative to all regulatory frameworks in scope for IT and industry-standard risk management initiatives.
• Develop and present audit findings with remediation recommendations to senior executive management and the Audit Committee.
• Act as an SME to regional IT leadership with advice and counsel regarding compliance-related activities and supporting recommendations.
• Identify and acquire interim assistance from internal resources that may be required to evaluate specialized or unique technology applications (e.g., new system implementations or application changes).
• Oversee the IT monitoring program with a focus on Sarbanes-Oxley/GCC compliance as well as other areas of IT and risk management compliance; review documentation in accordance with Sarbanes-Oxley requirements related to internal controls and audit reporting.
• Drive global operational control processes to reduce opportunities for exceptions or deficiencies.
• Support the senior executive leadership as required for global IT compliance and risk management related initiatives.
• Identify software compliance gaps and report remediation plans to senior executive leadership on a quarterly basis.
• May perform other additional duties and responsibilities as assigned.
EDUCATION and/or EXPERIENCE
Bachelor’s degree and ten (10) plus years of management experience in a similar global/cross-functional role required, experience with compliance and regulatory control frameworks strongly preferred; or any equivalent combination of related training/education and experience required.
QUALIFICATIONS:
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.
• Must possess strong interpersonal skills with a proven ability to influence others and lead teams
• Ability to identify dependencies and leverage multiple sources of information simultaneously
• Strong reputation for integrity and ability to balance business partnerships with the need to exercise independent judgment and raise issues in a timely and constructive manner
• Ability to credibly challenge solutions and ensure the timely escalation of issues and concerns as and when appropriate
• Experience interacting with senior executives is required
• Excellent understanding of Sarbanes-Oxley/IT-GCC is required
• Knowledge of CoBIT, SSAE-16, PCI, ISO, SOC, HIPAA, and other audit frameworks is required
• Knowledge of Microsoft software products and license models is required
• Understanding of fundamental IT network infrastructures
• High level of proficiency in problem-solving, creativity, independent thought, and sound judgment
• Effective oral and written communication skills
• International travel is required at approximately 30%
.