Manager, IT Risk & Compliance

POSITION SUMMARY

The Manager of IT Security & Compliance serves as a technical leader responsible for delivering security and compliance solutions. This role drives continuous improvement in identifying, managing, monitoring, and communicating security compliance across the organization.

The position partners closely with various business units, including IT, Internal Audit, Legal, the Data Protection Office (DPO), and other functions to align on business processes, security standards, and compliance monitoring. Establishing strong relationships across all levels of leadership, enhancing organizational compliance, and providing cybersecurity expertise are critical to success in this role.

Key responsibilities include expanding, improving, overseeing, and governing security compliance policies, requirements, processes, and ongoing monitoring. The role requires a highly collaborative team player who can effectively communicate IT security controls and work cross-functionally to strengthen security and compliance within Solaire IT Operations.

JOB RESPONSIBILITIES

- Oversee IT security and compliance in alignment with internal policies, standards, processes, and procedures, including scheduled internal audits of systems, servers, networks, business applications, and IT services to maintain compliance.
- Collaborate with external auditors, third parties, and customers to facilitate audit requests and the collection of supporting evidence.
- Govern IT security policies, processes, and tools to effectively manage and sustain compliance and audit systems, including associated services.
- Design and conduct regular audits of IT systems to ensure secure operations and protection of data from internal and external threats.
- Provide subject matter expertise to support the implementation and enforcement of security compliance across IT systems.
- Establish clear communication and reporting mechanisms for security compliance across business units.
- Lead discussions with stakeholders to address compliance gaps and drive improvement initiatives.
- Engage across business units to enhance program effectiveness, increase visibility, and strengthen security compliance across on-premise and cloud IT infrastructure.
- Balance and prioritize multiple workstreams while addressing competing priorities.
- Assess organizational impact and align security initiatives with business requirements.
- Ensure application security procedures meet business requirements and protect information from unauthorized access, disclosure, modification, damage, or loss.
- Oversee the implementation of access controls to ensure systems and data are accessible only to authorized and trained users, including proper handling and destruction of sensitive information.
- Serve as a subject matter expert in security procedures and audit compliance.
- Provide leadership, guidance, and mentorship to less experienced team members.
- Demonstrate strong written and presentation skills in delivering security-related communications.

Requirements

QUALIFICATIONS AND REQUIREMENTS

- Minimum of 7 years of experience in IT Security and Compliance.
- Bachelor’s degree in Computer Science or a related IT discipline.
- Certified Ethical Hacker (CEH) with expertise in penetration testing tools, techniques, and methodologies.
- CompTIA Security+ with a strong foundation in network security and risk management principles.
- CompTIA Network+ with knowledge of network infrastructure, configuration, and troubleshooting.
- CCNA or CCNP Security certification with expertise in enterprise networking and security hardening.
- Certified Information Systems Auditor (CISA).
- Strong knowledge of information security methodologies.
- Working knowledge of security standards and frameworks, including ISO 27001, NIST, and other cybersecurity frameworks.
- Advanced expertise in Cyber Kill Chain and MITRE ATT&CK frameworks.
- Expertise in network security technologies, including firewalls, web proxies, routers, switches, and ACLs.
- Experience with enterprise security systems and implementation practices, including the Data Privacy Act (DPA).
- Familiarity with corporate and government security regulations, including the National Privacy Commission (NPC).
- Strong communication skills to effectively engage stakeholders and support teams.
- Proficiency in implementing and configuring network security devices and components.
- Strong analytical and problem-solving capabilities.
- Effective organizational skills to manage and prioritize workload.
- Ability to work independently and collaboratively within a team environment.
- Understanding of ITIL Service Delivery framework.
- Professional, with a strong commitment to service excellence and value delivery.