Responsibilities:

• Lead and manage the Information Assurance and Compliance team, providing guidance, mentorship, and performance oversight 
• Oversee compliance programs aligned with regulatory and security frameworks (e.g., NIST, ISO 27001, HIPAA, FedRAMP, SOX as applicable) 
• Coordinate internal and external audits, including evidence collection and audit response activities 
• Ensure systems and processes comply with established security controls and policies 
• Conduct risk assessments and track remediation of identified gaps or vulnerabilities 
• Develop, implement, and maintain information security policies, standards, and procedures 
• Monitor compliance metrics and prepare executive-level reports and dashboards 
• Collaborate with IT and security teams to ensure controls are properly implemented and maintained 
• Manage continuous monitoring and control validation activities 
• Support incident response and ensure proper documentation of compliance impact 
• Liaise with auditors, regulators, and third-party assessors 
• Drive process improvements to strengthen governance, risk, and compliance (GRC) practices

Minimum requirements: Bachelors degree and 8+ years experience

*Position subject to CSWF requirements*