IT Security and Compliance Manager

5 days ago Be among the first 25 applicants

This range is provided by Encore Talent Solutions. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

$85,000.00/yr - $/yr

Direct message the job poster from Encore Talent Solutions

About Encore Talent Solutions:

Encore Talent Solutions is a trusted professional services firm dedicated to helping organizations achieve their goals by providing exceptional talent solutions. We partner closely with our clients to understand their unique culture and operational needs, delivering proactive support during times of growth, transition, and change. Our mission is to connect top talent with meaningful opportunities to drive business success.

Position Overview

The IT Security and Compliance Manager is responsible for developing, implementing, and managing organization‑wide security and compliance frameworks to ensure the integrity, confidentiality, and availability of the client’s systems, applications, and data.

This role serves as a strategic advisor and operational leader who collaborates across the enterprise—working closely with the NITO, IT leadership, department heads, and C‑suite executives—to ensure all systems and processes remain secure, compliant, and aligned with the client’s mission to serve America’s veterans.

The ideal candidate is both a strategic thinker and hands‑on practitioner, capable of leading policy development, risk management, incident response, and compliance initiatives. They will also act as a key liaison with the Fundraising, Development/CRM, and Data teams to ensure appropriate protocols are in place for vendor security, PCI compliance, and insurance‑related assessments.

Key Responsibilities

Security Strategy & Governance

• Develop and lead the organization’s cybersecurity program aligned with recognized frameworks such as NIST CSF, CIS Controls, and ISO 27001.
• Establish and maintain security policies, procedures, and standards across network, application, and cloud environments.
• Conduct periodic risk assessments, vulnerability scans, and security audits; coordinate remediation efforts with IT and business units.
• Monitor and enhance identity, access, and endpoint security controls across Microsoft 365, Azure/Entra , and other enterprise systems.
• Serve as a subject‑matter expert on cybersecurity, ensuring alignment with DAV’s operational goals and compliance obligations.

Compliance & Risk Management

• Oversee organizational compliance with PCI DSS, data privacy laws, vendor risk frameworks, and insurance security standards.
• Partner with internal stakeholders in Fundraising, CRM/Development, Finance, and HR to maintain compliance in payment systems and donor data handling.
• Coordinate security assessments for vendors, partners, and third‑party systems; ensure appropriate due diligence documentation is maintained.
• Support audit readiness and external assessments, including responses to security questionnaires and evidence collection.
• Serve as the primary liaison for IT security and compliance matters with NITO, IT Directors, department heads, and executive leadership.
• Provide clear, actionable communication of security risks and compliance priorities to both technical and non‑technical audiences.
• Build strong relationships with internal teams to promote a culture of accountability and proactive risk management.
• Represent the IT department in cross‑functional committees and strategic planning initiatives related to cybersecurity and data governance.
• Lead employee cybersecurity training and phishing simulation campaigns to strengthen organizational awareness.
• Promote continuous improvement in security posture through education, communication, and cross‑departmental engagement.
• Stay current on emerging threats, technologies, and compliance standards relevant to the client’s mission and IT ecosystem.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field (Master’s degree preferred).
• Minimum 5–7 years of experience in IT security, risk management, or…