IT Compliance Lead Project Manager Job in Pleasanton, California US
IT Compliance Lead Project Manager
Shared Services- Lead Project Manager The IT Compliance Shared Staffing Unit provides subject matter expertise and staffing from technical, project management and business consulting perspective in support of KPIT Compliance activities. Members of this team work across a number of Compliance related initiatives to ensure appropriate processes, procedures and controls are adequately designed, implemented or remediated to meet audit and compliance expectations (e.g.; SOX, PCI, HIPAA, etc.), operating efficiency goals, and other business objectives The continued evolution of Health Care reform has driven unprecedented changes in the regulatory and Compliance landscape within the Health Care industry. In the Shared Staffing Unit you will be responsible for partnering with business and technology constituencies to address these evolving challenges by embedding risk management and compliance management competencies into day to day activities. - An in-depth understanding of the broad regulatory landscape impacting KP business areas. Remain current with emerging regulatory sentiments as well as solution trends in the marketplace. - Assessing the impact of laws and regulations on KP systems and technology. Work with other risk organizations to shape organizational control policies and standards. - Manage large scale risk/security assessment studies and projects to validate and remediate perceived risks. Perform interviews, document design assessments, and walkthroughs of key controls (both new and existing). - Lead cross-functional remediation teams in developing processes using requirements gathered from clients and engineering. - Exhibit pragmatism in formulating process remediation and implementation strategies, defining work tracks; and submitting assessment findings and recommendations - Design sustainment strategies and measurement systems to ensure that Compliance requirements can continue to be maintained over time. - Support IT multi-year planning process by providing program and project descriptions, estimated costs and risk justification data. - Develop and nurture trusted relationships with Business Partners, KP IT Executives, Security Compliance Officers and other Compliance Team Members to gain consensus approvals on strategies, recommendations, findings, project plans, etc. Qualifications: . Basic Qualifications: Bachelor degree in Computer Science, Information Systems, Management Information Systems, or Business Administration or other related field. (Master degree is preferred.) Significant and relevant technical experience meeting the job description may be substituted for degree requirements. 5 years audit and 3 years SOX compliance experience that includes a broad understanding of the software delivery process, professional services consulting and/or program management. 5 years experience providing information security or information technology consulting services to a broad range of companies and/or federal and state agencies. 5 years of progressively responsible management experience in the following areas: planning, budget/forecast/financial management, and staffing Solid understanding of Enterprise Risk Management and Strategy frameworks as well as understanding of current enterprise threat scenario as related to healthcare Demonstrated ability to manage implementations of large-scale, complex, multi-disciplined, cross-functional and highly visible projects/programs. In depth knowledge of : o Current information security and compliance vendor landscape o Control frameworks such as COSO o Regulatory requirements in particular, HIPAA, SOX, PCI-DSS Ability to direct and lead cross-functional, cross-vendor teams Must be experienced in Project Management Methodologies and experienced in mentoring less experienced project personnel. TheLead Project Manager will be required to know or learn the KP-IT program and process methodology and to execute it within the established KP and KP-IT organizational framework and oversight processes. Preferred requirements/knowledge: Certified Information Security Auditor/Manager (CISA/M) designation or CISSP Certified Public Accountant (CPA) Excellent communicator with strong client relationship focus with business sponsors, enterprise architects, and information security engineers to articulate business case and technology options Practical experience managing multiple large-scale compliance/audit projects simultaneously, strong internal consulting, customer account management, and defining engagement scope, negotiating commitments, gathering requirements, defining deliverables, designing integrated solutions, and overseeing technical implementations considered a plus Proven experience proposing enterprise level solutions to mitigate risk of receiving a material deficiency in IT general controls