Risk & Compliance Manager

$93,000 - $191,000/Yr

Deloitte - Houston, TX

Full-time - Senior

Houston, TX

1,001-5,000 employees

Professional, Scientific, and Technical Services

About the position

The Risk & Compliance Manager at Deloitte is responsible for supporting audits and assessment programs within the Technology Cyber Security Risk & Compliance team. This role focuses on understanding and assessing technology and operational risks related to both internal and cloud technology solutions, while also providing input on appropriate controls to mitigate those risks. The position involves collaboration with internal and external auditors and requires a strong understanding of risk management, compliance, and information security frameworks.

Responsibilities

• Develop, manage, lead, and execute strategies and tasks associated with the ISO and TISAX security programs.
• Understand and assess technology and operational risks related to internal and cloud technology solutions.
• Design, recommend, plan, develop, and support implementation of project-specific security solutions.
• Recommend policies, standards, procedures, and controls to ensure the confidentiality, integrity, and availability of IT environments.
• Manage remediation of identified risks and vulnerabilities, tracking progress and reporting to stakeholders.
• Represent Information Technology in internal and external assessments and audits, interpreting results and communicating recommendations.
• Participate in continuing education and professional organizations to stay current in information security.
• Work with various teams to determine the scope of onsite visits, audits, and assessments as defined by contracts and regulations.
• Develop and recommend information security policies, standards, procedures, and guidelines.
• Create risk/vulnerability assessment programs and questionnaires to identify and mitigate security risks.

Requirements

• Bachelor's degree or equivalent in Computer Science, Business Administration, or Information Systems.
• Minimum 6 years of experience in managing IT audits, assessments, and remediation management.
• Minimum 2 years of experience with industry standard frameworks such as ISO 27001, HIPAA, HITRUST, etc.
• Minimum 1 year of people leadership or project management experience.

Nice-to-haves

• Master's Degree in Information Security, Information Protection, or related fields.
• Industry certifications such as CISA, CISSP, CISM.
• Familiarity with privacy laws and cloud security frameworks.
• Experience with Archer Policy/Compliance Management tool.
• Understanding of infrastructure architecture including cloud security and communication protocols.

Benefits

• Competitive salary range of $93,000 - $191,000.
• Limited immigration sponsorship may be available.