Sr Manager of Risk & Compliance

Overview

Dice is the leading career destination for tech experts at every stage of their careers. Our client, PTR Global, is seeking the following. Apply via Dice today!

Position: Sr Manager of Risk & Compliance

Location: Salt Lake City, Utah

Duration: Perm Placement

Job : 174073

The Senior Manager of Risk and Compliance is a hands-on leadership role responsible for the execution and operational delivery of security compliance, risk management, and audit functions. This position oversees a team of compliance analysts and collaborates cross-functionally with stakeholders to ensure security controls and compliance objectives are met. The role involves managing day-to-day security risk activities, responding to client audit and assessment requests, overseeing third-party vendor reviews, and leading internal assessments and risk treatment tracking.

The ideal candidate combines deep operational knowledge with the ability to mentor and guide a growing team.

• Design and lead the information security risk assessment strategy, methodology, and process.
• Coordinate enterprise-wide information security risk assessments and oversee risk treatment plans.
• Perform internal control reviews, gap assessments, and compliance documentation for regulations such as HIPAA, SOC 2, NIST, and ISO 27001.
• Manage risk and compliance resources for team execution.
• Develop and maintain security policies, standards, and procedures aligned with leading frameworks.
• Assess third-party risk and advise on risk acceptance/treatment in conjunction with vendor management processes.
• Deliver regular reporting on metrics, KPIs, risk posture, exceptions, remediation, and audit status.
• Provide approved responses to client inquiries and maintain a library of records, documentation, and responses.
• Ensure key security controls are identified, implemented, tested, and remediated as required.
• Evaluate and advise on security control recommendations to mitigate information security risks.
• Respond to security assessments, questionnaires, and audits from regulators, clients, and third-party business partners.
• Work directly with clients to provide advisory services and guidance to reduce organizational risk and improve security posture.
• Prepare reports and deliverables containing strategy, technical analysis, findings, and recommendations.
• Other duties as assigned.

• Bachelor's degree in Information Security, Information Systems, or a related field.
• Minimum 5+ years of management experience in Information Security, including operational security, risk management, IT, compliance, and audit.
• 5+ years of experience specific to security risk management and compliance programs, processes, and execution.
• Certifications such as CISA (required), CISSP, CRISC, CISM, or other equivalents (preferred).
• Strong analytical skills and excellent written and verbal communication skills, including presentation abilities.
• Understanding of industry and regulatory standards such as NIST 800-53, HIPAA Security Rule, ISO 2700x, AICPA SOC 2, PCI DSS, GDPR, and CCPA.
• Hands-on experience with GRC platforms and work management tools (e.g., Jira, Confluence).
• Proven ability to operate independently, manage multiple priorities, and drive results in a deadline-driven environment.
• Expertise in areas such as cyber risk program management, security architecture, security technologies, data protection, third-party risk management, and cloud security.

PTR Global is a leading provider of information technology and workforce solutions. PTR Global has become one of the largest providers in its industry, with over 5000 professionals providing services across the U.S. and Canada.

For more information visit.

$150,000 - $160,000

The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits, including medical, dental, vision, and 401K contributions, as well as PTO, sick leave, and other benefits mandated by applicable state or localities where you reside or work.

If you receive a suspicious message, email, or phone call claiming to be from PTR Global do not respond or click on any links. Instead, contact us directly at the information provided by PTR Global. To report any concerns, please email PTR Global.