Associate Director, Regulatory Risk, Compliance & Accreditation

Planned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and
reproductive health care for all people, as well as the nation’s largest provider of sex education. Planned
Parenthood organizations serve all people with care and compassion, with respect, and without judgment,
striving to create equitable access to health care. Through health centers, programs in schools and
communities, and online resources, Planned Parenthood is a trusted source of reliable education and
information that allows people to make informed health decisions. We do all this because we care
passionately about helping people lead healthier lives.

Planned Parenthood Federation of America (PPFA) is a 501(c)(3) charitable organization that supports the
independently incorporated Planned Parenthood affiliates, which operate non-profit health centers across
the U.S. PPFA also works to educate the public on and advocate for issues of sexual and reproductive
health. Formed as the advocacy and political arm of Planned Parenthood Federation of America, Planned
Parenthood Action Fund is a separate non-profit membership organization tax-exempt under section
501(c)(4). The Action Fund engages in educational, advocacy, and limited electoral activity, including
grassroots organizing, legislative advocacy, and voter education in furtherance of the Planned Parenthood
mission.

Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund seek a dynamic
and effective Associate Director, Regulatory Risk, Compliance & Accreditation. This job reports to
the Director, Information Security, Risk & Compliance in the Information Security department of PPFA. The
Office of Information Security provides the strategy and implementation of the information security
program that safeguards the data entrusted to Planned Parenthood by its patients, supporters, donors,
and staff.

• The Associate Director will serve as an Information Security & Technology (IS&T) Program Expert
  and Accreditor for the PPFA Accreditation & Certification Program, which works to assess and
  manage risks across the federation through routine evaluation of its affiliate and ancillary
  organizations.
• The Associate Director is also responsible for PCI DSS compliance activities across
  the federation, which ensures that relevant internal controls are assessed and meet established
  information security, regulatory, operational, and reporting policies, regulations, and guidelines,
  while also providing support to the Third Party Risk Management (TPRM) Program, as needed.

• The Associate Director will be part of the HIPAA, Risk & Compliance team.
• This role will engage with the Information Security team, team members across the broader TSS division, the Accreditation &Evaluation Department (AED) team, Development, Finance, Office of the General Counsel and third party vendors.
• This role will engage with the executive and operational staff within the PPFA National Office, affiliates,
  and ancillary organizations.

• The Associate Director will deliver by evaluating security and technology systems, controls, and
  policies of affiliate and ancillary organizations, write reports that interpret assessment results and
  enumerate any findings, develop and track corrective actions, and assess efficacy of risk mitigation
  activities performed by the affiliate or ancillary organization.
• The Associate Director will deliver by
  conducting PCI DSS compliance activities utilizing assessment tools to ensure regulatory
  compliance and risk management across the federation.
• Conducts Accreditation and Certification interviews, risk assessments, and technical analyses
  to determine areas of risk and non-compliance with defined IS&T criteria aligned to cyber
  security frameworks (NIST CSF) and regulatory requirements (HIPAA Security, PCI DSS).
• Conducts Accreditation and Certification interviews, risk assessments, and technical analyses
  to determine areas of risk and non-compliance with defined IS&T criteria aligned to cyber
  security frameworks (NIST CSF) and regulatory requirements (HIPAA Security, PCI DSS).
• Conducts Accreditation and Certification interviews, risk…