Security Client and Vendor Compliance Lead

Security Client and Vendor Compliance Lead

Requirements

• Bachelor’s degree in business, law, or a related field
• At least 6 years of experience in compliance, risk management, or related areas
• Minimum of 7 years in a senior leadership role
• Direct oversight of managing external attestations such as SOC1/SOC2 Reports
• Managing compliance with GLBA, PCI DSS, GDPR
• Direct experience managing and redlining contractual security requirements
• Direct experience with managing international compliance requirements in Europe
• Effective negotiation skills
• Strong presentation and relationship management skills
• Articulate and effective communicator, both orally and in writing

Responsibilities

• Engages with Cox business leaders to ensure understanding and support of security compliance strategy, priorities and initiatives
• Collaborates with the team on effective roadmap development and governance for global initiatives related to security awareness, policy development, client and vendor compliance and overall process improvement
• Establish, maintain and communicate CAI security policies related to third party service providers
• Serve as the liaison with External Auditors, Internal Audit, on all significant Compliance issues involving third party service providers
• Manage all contractual security requirements for third party service providers and present compliance reports to the leadership and executive team
• Provide oversight and guidance over the assessment of broad complex issues, structures potential solutions and drive effective resolution with other senior stakeholders.

Preferred Qualifications

• Ability to make strategic decisions, supervise complex programs, manage and educate highly skilled professionals
• Solid, pragmatic business acumen with a proven record of creatively solving problems and offering solutions
• Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership
• Ability to manage multiple complex projects while meeting all deadlines
• Develop strong and productive working environment with key stakeholders
• Relevant industry certification: CISSP, CEH, OSCP, Azure, AWS, CISM, CISA, etc.