Victoria , British Columbia Staffing Direct Hire Feb 23, 2023
BH - Team Lead, IT Compliance – Permanent (British Columbia)
Summary: This position is an experienced IT Manager accountable for establishing & implementing an IT Compliance Policy and Framework that involves but is not limited to: assessing adherence to IT Governance Frameworks (COBIT 2019, ISACA IT Control Objectives for Sarbanes-Oxley), and assisting with policy development. This position provides direction and assistance to Project Managers and sustainment, with information technology projects and initiatives. This position is also responsible for IT compliance and responsible. for developing and implementing company-wide IT Information policies, standards, and guidelines, which includes implementing, managing and enforcing information directives as mandated by CIO office. In addition, this role works directly with IT staff to implement procedures and systems for the protection, conservation and accountability of proprietary, personal or privileged electronic data.
Responsibilities:
Supervise, mentor and coach IT compliance staff;
Oversee the IT General Controls system to prevent, detect and remediate violations;
Participate in IT and business unit projects to ensure IT governance framework, policies and standards are adhered to;
Lead IT compliance assessments for existing systems, new projects or major changes to the existing technological environment;
Provide overall management of IT compliance remediation requirements and provide assistance to other teams with the implementation of action plans, to promote the remediation of issues;
Participate in the development of plans and designs to integrate compliance to every day activities;
Manage and ensure compliance with regulations (e.g. PCI DSS), acts (e.g. FOIPP) and applicable business protection policies, standards & procedures;
Manage the development of IT policies standards, processes, guidelines and procedures to ensure ongoing maintenance and protection of our information assets;
Manage and ensure compliance with standardized applications controls;
Assist with any third party information reviews and/or audits;
Oversee and assist with remediation plans for IT issues noted during audits and assessments;
Perform IT assessments; Complete SOC/AOC reviews for vendors, providing services, and using standards CSAE 3416 / SSAE 18;
Manage common IT documents related to compliance and governance, by coordinating, reviewing and updating existing policies, processes, guidelines and frameworks;
Review new documentation to ensure compliance requirements are met;
Oversee enforcement of IT policies and procedures based on industry-standard best practices, ensuring compliance to legal counsel, auditors and legislation;
Assist in the design of IT security controls based on compliance with relevant frameworks;
Collaborate with internal (e.g. External Audit and Privacy Office) and external stakeholders (3rd parties and Government of BC) to ensure that our information and information systems are complying with applicable regulations and acts;
Ensure adherence to regulatory reporting guidelines and deadlines
Education/Academic Requirements:
Degree or Diploma in Computer Science, Business, Auditing or an IT related discipline;
CSIM, CISSP, CISA training would be an asset; COBIT or ITIL certification (Foundation) would be an asset.
Work Experience:
Experience implementing compliance standards and conducting assessments;
Experience conducting IT risk assessments;
Experience implementing and using COBIT;
Experience with PCI DSS;
Understanding of networks, data security, servers, storage, applications, infrastructure, project management and IT governance
Competency Requirements:
Working knowledge of IT best practices;
Ability to deal with confidential/ sensitive subject matter;
Ability to lead and motivate others, to assume the supervisory role and work cooperatively within diverse teams;
Demonstrated ability to follow through on commitments and acknowledging and assuming responsibility for work, actions and decisions;
Ability to convey complex and technical issues to diverse audiences, orally and in writing, in a manner that is easily understood, authoritative and actionable for the business;
Demonstrated ability to embrace and practice continuous improvement;
Demonstrated ability to apply original and innovative thinking to produce new ideas and create innovative solutions;
Takes the initiative to acquire new knowledge and learn new skills; finds opportunities in ambiguity; can adapt to change and takes action to encourage others to change;
Demonstrated ability to understand problems, find, alternatives and approaches to come up with solutions and takes the initiative to drive a problem to resolution;
Demonstrated ability to foster positive and collaborative relationships with all stakeholders, building trust through goal alignment and transparency;
Demonstrated ability to drive toward results, and ensure high-quality standards and complete requirements are met;
Demonstrated ability to facilitate and promote individuals to work together to meet common goals
Email:If you would prefer to email a copy of your resume for later review, we would be pleased to consider your resume for future upcoming opportunities, please send resume, availability and compensation expectation to: megan.degagne@brainhunter.com
Please note:While we appreciate and welcome all applications, only those who satisfy employment eligibility in Canada and meet the qualifications for the role will be contacted.