What You'll Do Day to Day: We are looking for a Vice President of IT Governance, Risk, and Compliance to mature and manage LendingPoint's IT GRC program, providing for effective management of IT risk, while ensuring the highest level of compliance for LendingPoint's IT services. Primary duties are focused on management of audit and compliance activities, policy development, and risk management.
ESSENTIAL JOB FUNCTIONS:- Responsible for effective and compliant management of IT governance, risk, and compliance activities.
- Drive security best practices and ensure both regulatory and compliance requirements are met (ISO 27001, PCI, SOX, SOC 1-2-3, privacy, etc.)
- Ensure successful completion of PCI, SOC2, and ISO 27001 certification (clients and partners will look for the latter)
- Manage external audits and auditors - schedules, scope, evidence collection, SOW negotiation, remediation, audit closure
- Manage client IT audit requests in partnership with compliance, 3rd-party risk management and Legal groups
- Ensure IT governance aligns to compliance, business, and security strategy and outcomes
- Ensure policies and standards enable business success while ensuring compliance and security requirements are met
- Establish IT risk management framework and perform regular assessments to drive compliance and security maturity
- Develop risk acceptance process for ensuring risky changes are evaluated and approved prior to implementation
- Establish and maintain enterprise security risks register for incorporation into executive reporting
- Develop metrics and reporting to show maturity and track status
MINIMUM QUALIFICATIONS: - Bachelor's Degree in Information Security or a related field required, Master's degree preferred
- 4+ years of related experience beyond the minimum required may be substituted in lieu of a degree
- 15+ years of relevant experience in audit and compliance programs, particularly in finance and IT areas
- 5+ years of experience in IT GRC program management
- 10+ years of experience with relevant regulatory compliance frameworks such as ISO, SOX, SOC, PCI, etc.
- Expert knowledge of relevant business processes and regulatory compliance requirements
- Strong communication skills with proven ability to drive solutions across all organizational levels
- Strategic and operational planning experience
- Certified Information Systems Auditor (CISA) preferred
