Manager IT Compliance

Location:

Bethpage, NY, US, 11714

Brand:
Optimum

Requisition #: 11821

The Manager

IT Compliance will oversee and manage our company’s SOX, PCI, AI governance, and related IT governance, risk, and compliance obligations. The ideal candidate will have a mixture of security, risk management, AI governance, and IT compliance skills with a history of managing and delivering complex compliance projects on time and within budget. This role will supervise multiple teams of compliance specialists and act as a central point of contact for the organization for all compliance matters.

• Provide leadership, guidance and direction to the Security & IT Compliance team and related stakeholders
• Act as a central contact person for the organization for all matters related to Security & IT Compliance
• Define and maintain the Security & IT Compliance framework for the various IT Compliance disciplines including people, process and technologies needed to maintain compliance
• Design, specify, implement, and monitor internal controls which help to ensure that AUSA is compliant with relevant laws and regulations, internal policies and standards, and other requirements
• Evaluate IT controls and drive the remediation of control weaknesses, communicate to respective compliance stakeholders
• Supervise the performance of risk assessments, self-audits and establish performance metrics against control-related policies and procedures
• Provide recommendations for meeting compliance requirements and manage any exceptions to closure
• Develop and deliver multi-faceted training/awareness programs to teach staff the importance of compliance, and the ways in which compliance is maintained with laws and regulations, internal policies and standards and other requirements
• Maintain an up-to-date and thorough understanding of all requirements which AUSA must comply, including laws and regulations, contractual commitments, internal policies and procedures
• Provide oversight to compliance activities when interacting with third parties/vendors. Review contractual agreements, ensuring IT compliance adherence is stipulated
• Prepare/perform/approve performance evaluations and development plans;
  Interview/approve personnel for hire
• Manage vendor relationships, ensures the vendors are responsive to company needs
• Negotiate with legal on all contracts, statements of work and maintenance agreements to ensure compliance
• Participate in budget planning and analysis
• Lead the design and operation of the company’s AI governance and compliance program, aligning controls and policies with recognized frameworks such as the NIST AI Risk Management Framework (AI RMF), ISO/IEC 42001, and applicable AI-related regulations
• Perform compliance and risk assessments of internal and third-party AI/ML use cases – including generative and agentic AI – evaluating data privacy, security, bias, model transparency, and regulatory exposure prior to deployment
• Maintain the enterprise AI inventory and the accompanying policies, standards, and acceptable-use guidelines that govern responsible adoption of AI across the organization
• Partner with Legal, Privacy, Data Science, Engineering, and the AI Governance Committee (or equivalent forum) to operationalize responsible AI principles within existing GRC, change-management, and SDLC processes
• Drive automation of evidence collection, control testing, and continuous controls monitoring through modern GRC platforms (e.g., Archer, Vanta, Drata, Audit Board) to reduce manual effort and audit fatigue across control owners
• Develop and report compliance KPIs, control health dashboards, and AI-risk indicators to senior leadership, audit committee stakeholders, and external auditors
• Monitor the evolving regulatory and standards landscape (SEC cybersecurity disclosure rules, state and federal AI legislation, EU AI Act, sector-specific telecom obligations) and translate emerging requirements into actionable controls and roadmap items

• A bachelor’s degree in Information Technology, Computer Science, or related fields.
• 10+ years of experience in cybersecurity, IT compliance, or auditing, particularly in PCI and Sarbanes-Oxley (SOX)…