Compliance

• Compliance Assurance, Monitoring, and Reporting: Manage and coordinate compliance assurance activities, including NIST Cybersecurity Framework (CSF) maturity assessments, regulatory assessments such as Sarbanes-Oxley (SOx) and Transportation Security Administration Security Directives (TSA SD), and internal audit engagements.
• Collect and validate compliance evidence for audits and assessments.
• Provide timely support to stakeholders and subject matter experts in developing responses, remediation plans, and actionable strategies.
• Perform risk-based compliance checks and controls testing to validate effectiveness.
• Maintain accurate compliance performance through dashboards and management reporting.
• Ensure timely closure of audit findings and maintain audit logs.
• Risk Management Support: Identify and report emerging risks driven by technological and regulatory changes.
• Contribute to risk assessments and support tracking, monitoring, and documentation of risks.
• Governance – Policy and Standard Support: Assist in reviewing and updating cybersecurity policies, standards, and procedures.
• Support governance activities ensuring documentation aligns with organizational objectives and regulatory obligations.
• Relationship Management: Engage with internal stakeholders on compliance-related controls and risks.
• Maintain strong relationships with third-party assessors and internal audit teams to ensure seamless audit execution.
• Continuous Improvement: Identify opportunities to streamline compliance processes through automation and AI.
• Conduct post-implementation review sessions and integrate improvements into frameworks and processes.

IT Governance, Risk & Compliance Specialist

Regulatory Manager

Senior Regulatory Analyst