It Risk and Compliance Specialist

Overview

The IT Compliance Specialist will play a critical role in ensuring our IT systems and processes comply with SOX regulations and industry best practices. This position will provide strategic leadership and guidance to the IT compliance team, as well as collaborate with cross‑functional teams, including IT, finance, and internal audit, to identify and address any potential compliance risks and issues. The successful candidate will have a deep understanding of SOX regulations as well as a working knowledge of relevant industry best practices.

Bright Spring Health Services

• Develop and implement a comprehensive IT compliance strategy and program to ensure adherence to SOX regulations and industry best practices
• Oversee and manage all aspects of IT compliance with SOX requirements, including assessing, developing, implementing, and maintaining IT controls and processes
• Collaborate with IT and finance teams to identify and document key IT controls and processes that are subject to SOX compliance and industry best practices
• Conduct regular assessments and audits of IT controls to ensure compliance with SOX requirements and identify any potential compliance risks or issues
• Develop and implement IT compliance policies, procedures, and guidelines to ensure adherence to SOX regulations and industry standards
• Provide strategic guidance and leadership to the IT compliance team, including setting goals, managing performance, and fostering a culture of compliance
• Coordinate with internal and external auditors to facilitate SOX compliance and other audits and provide necessary documentation and evidence
• Stay up‑to‑date with industry trends and changes in compliance regulations to ensure ongoing compliance and recommend necessary updates to IT controls and processes
• Collaborate with cross‑functional teams to develop and implement IT compliance initiatives and projects
• Prepare and present regular reports to senior management on the status of IT compliance

• Bachelor's degree in Information Technology, Computer Science, or a related field is preferred
• Minimum of nine years of experience in IT compliance, internal audit, or a related role, preferably within the Health Care services industry. External audit experience is also preferred
• Professional certifications such as Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC) are a plus
• Strong knowledge of SOX regulations and their application to IT systems and processes
• Working knowledge of NIST, HIPAA, and ISO standards and their application to IT systems and processes
• Proven track record of developing and implementing effective IT compliance programs, including IT controls and processes
• Familiarity with IT risk management frameworks and methodologies
• Excellent leadership and people management skills, with the ability to inspire and motivate a team
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross‑functional teams and senior management
• Detail‑oriented and highly organized, with the ability to manage multiple tasks and priorities simultaneously
• In‑depth knowledge of Health Care industry regulations and compliance requirements is essential

Bright Spring Health Services provides complementary home‑and community‑based pharmacy and provider health solutions for complex populations in need of specialized and/or chronic care. Through the Company’s service lines, including pharmacy, home health care and primary care, and rehabilitation and behavioral health, we provide comprehensive and integrated care and clinical solutions in all 50 states to over 450,000 customers, clients and patients daily.

Bright Spring has consistently demonstrated strong and industry‑leading quality metrics across its services lines, while improving the quality of life and health for high‑need individuals and reducing overall costs to the healthcare system. For more information, please visit  Follow us on Facebook, Linked In, and X.