Security Policy and Compliance Manager - Virtual

Our Story

At Alight, we believe a company's success starts with its people. Alight embraces values that come directly from our people - purposeful, human, united and growth-minded - reflecting our inclusive culture and promise that our clients expect. We are passionate about connecting purpose with impact. Alight empowers clients to build a healthier and more financially secure workforce by unifying the benefits ecosystem across health, wealth, wellbeing, navigation, and absence management.

With a comprehensive total rewards package, Alight offers programs and plans that support your mind, body, wallet, and life. Benefits include health, dental and vision coverages starting Day One. Additionally, Alight colleagues enjoy wellbeing programs, retirement plans with contribution matching, generous time off, parental leave, continuing education, and career growth opportunities - all within a thriving global organization.

So that you can be your best at work and home, we consider flexible working arrangements wherever possible. Alight has been a leader in the flexible workspace and "Top 100 Company for Remote Jobs" 6 years in a row.

Thanks to the work of every colleague, Alight has received multiple awards of recognition including "Great Place to Work" for the past 7 years and Fortune's "Best Companies to Work For." To learn more about our company culture and awards.

As a member of Alight Global Security's Security & Compliance team, this position is responsible for the required updates, reviews, creation, and maturity of Alight's security policies program. This role will be a subject matter expert for security policy helping inform colleagues and teams on required actions for Alight to remain in compliance with our policy and helping to track and manage any witnessed nonconformities.

Additionally, this position will help manage audits and their applicable controls. That will include coaching colleagues on what they need to do to meet and demonstrate each control for an audit and help speak to and present collected evidence with various external auditors.

• Help establish security policies, procedures, and guidelines on various information security controls
• Partner with the global security teams to review, update, publish Alight's global security polices and standards to continuously improve and mature Alight's global security policy program
• Identify security issues and gaps with security policies, standards, and procedures among employees, contractors, alliances, and other third parties.
• Map legal and regulatory requirements and developments onto global policies/procedures and make suggestions where needed
• Perform all audit attestation activities relating to aligned audits ensuring work and deliverables in accordance with agreed upon time frames and organizational procedures, standards, and protocols
• Interpret patterns of non-compliance discovered through audit to determine impact on levels of risk and work with the appropriate resources to drive higher levels of compliance.
• Owns and manages any gaps coming from the policy or audit process through remediation with stakeholders reporting milestones and escalates when necessary
• Work with internal subject matter experts to lead them in understanding the controls and required evidences
• Partners cross-functionally,…