[Hiring] Compliance Manager @Alight

Role Description

As a member of Alight Global Security’s Security & Compliance team, this position will help manage audits and their applicable controls. With a deep understanding of leading audits, this role will provide guidance to subject matter experts within Alight on what they need to do to meet and demonstrate each control and help speak to and present collected evidence with various external auditors. Additionally, this role would lead any necessary gap assessments, compliance readiness, and compliance monitoring activities through internal audits.

Key Responsibilities:

• Perform all audit attestation activities relating to aligned audits ensuring work and deliverables in accordance with agreed upon timeframes and organizational procedures, standards, and protocols.
• Interpret patterns of non-compliance discovered through audit to determine impact on levels of risk and work with the appropriate resources to drive higher levels of compliance.
• Own and manage any gaps coming from their audit process through remediation with stakeholders reporting milestones and escalate when necessary.
• Work with internal subject matter experts to lead them in understanding the controls and required evidence.
• Partner cross-functionally, inter-departmentally and with the external auditor to understand the process from an end-to-end perspective and appropriately and effectively communicate with these partners.
• Ensure frequent communication of test and/or audit results and analysis on a timely basis to the appropriate stakeholders and senior management within the audit department.
• Through the advanced use of technology (i.e. MS Excel, Corporation’s Proprietary Insurance Enrollment & Administration System), concisely measure, monitor and report metrics to senior management of the audit department and prepare snapshots of information in a synthesized and polished manner.
• Design, implement & mature security and risk management controls library, controls methodology & testing criteria.
• Responsible for staying current on regulatory rules and changes within the industry.
• Lead and/or actively participate in meetings with business unit to discuss test and/or audit scoping, testing progress and results.
• Interact and partner with senior management to understand the risks within the business, business changes and other significant events that could significantly impact the business and/or the audit plan.
• Communicate with regulators, external auditors, and various risk management committees within the Corporation as part of ongoing continuous monitoring which assists in managing the audit plan.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, or a related field and minimum 6 years of relevant experience. Additional years of relevant experience will be considered in lieu of a degree.
• Certifications in line with Cybersecurity and/or Project Management a plus.
• Experience in audit frameworks (ie SOC/ISO).

Requirements

• Demonstrated experience in working in a geographically dispersed team with global scope and responsibilities.
• Experience facilitating business process design as it relates to managing identities and access privileges.
• CISA certifications beneficial.
• Willingness to work outside of regular business hours as required which can include evenings, weekends, and holidays.
• Ability to handle and maintain the integrity and confidentiality of highly sensitive material and information.
• Must excel working in team-oriented roles that rely on ability to collaborate with others.
• MS Office and project management skills.
• Prior experience of information security, programming, IT risk management or audit preferred.
• Experience working with auditors and/or regulators preferred.
• Knowledge of NYDFS, HIPPA, PII, and GDPR requirements preferred.
• Interest in developing knowledge in security and interactions with various internal and external client functions.

Benefits

• Comprehensive total rewards package supporting mind, body, wallet, and life.
• Health, dental and vision coverages starting Day One.
• Wellbeing programs.
• Retirement plans with contribution matching.
• Generous time off and parental leave.
• Continuing education and career growth opportunities.
• Flexible working arrangements.