Compliance Lead

The Data Compliance Lead’s role is to ensure the secure operation of in-house systems, servers, and network connections in accordance with internal processes, procedures, and compliance requirements, as well as Federal, State, and Local laws. Tasks include conducting regularly scheduled audits on internal systems and hosting third-party and/or Cloud audits as required to maintain certifications and compliance certificates. The Data Compliance Lead also develops, implements, maintains, and oversees remediation and enforcement of internal security policies and procedures.

Top 3 Must Have

Skills:

The Data Compliance Lead is responsible for designing, publishing, and reviewing technology designs, security controls, and solutions to reduce the risk of unauthorized access, transmission, and storage of confidential data (e.g., IRS 1075, IRS Pub 1075, TOP, SSA, DHS, PII, and FTI data). Partner with security architects, other functional-area architecture, engineering, and security specialists to ensure adequate security solutions and controls are in place throughout the IT systems and platforms to mitigate identified risks sufficiently and meet business objectives and regulatory requirements.

Provide expert-level guidance to security analysts, testers, and development teams during application security assessments. Must be able to identify, re-create, and remediate security defects.

Other Desired

Skills:

• Define the information security architecture and design for applications as an expert/lead technical resource.
• Provide training for development and QA teams on how to implement Secure Software Development Life Cycle (S-SDLC) into their practices.
• In-depth knowledge of common web application security flaws and secure coding practices, with the ability to explain security issues clearly to project and development staff.
• Ability to prioritize and track security issues and work with teams to ensure remediation.
• Promote security awareness, mentor team members, and stay current on development methodologies (Agile/Dev Ops).
• Understand HTTP, REST, SOAP, XML, JSON, APIs, and AJAX; experience testing REST and/or SOAP APIs for compliance.
• Knowledge of AWS, Azure, and other cloud environments, including security issues and controls.

Desired Knowledge and

Experience:

• 7+ years in the Information Security space.
• 5+ years in enterprise software development.
• Strong web or mobile development background, providing security remediation advice.
• Experience with Threat Modeling in an enterprise setting.
• Excellent communication skills, able to convey risks to all levels of the organization.
• Understanding of web applications, architectures, databases, and security principles.
• Experience in multi-platform, multi-protocol enterprise environments.
• Experience with Unix/Linux and Windows system administration.
• Familiarity with governance frameworks like ITIL and ISO 27001.
• Project management experience, capable of assessing needs and leading initiatives.
• Ability to work independently and within teams.
• Awareness of industry trends and emerging threats.

All your information will be kept confidential according to EEO guidelines.