IT Risk and Compliance Manager - Senior

Information Security Risk And Compliance Governance Expert

Established in 2021, Independence Pet Holdings is a corporate holding company that manages a diverse and broad portfolio of modern pet health brands and services, including insurance, pet education, lost recovery services, and more throughout North America.

We believe pet insurance is more than a financial product and build solutions to simplify the pet parenting journey and help improve the well-being of pets. As a leading authority in the pet category, we operate with a full stack of resources, capital, and services to support pet parents. Our multi-brand and omni-channel approach include our own insurance carrier, insurance brands and partner brands.

Position Summary:

The Information Security Risk and Compliance Governance Expert is responsible for overseeing the governance framework that supports IPH's information security, risk management, and compliance initiatives. This role ensures alignment with regulatory requirements, internal policies, and industry standards. The ideal candidate will have deep expertise in information security, risk and compliance management, and governance.

Key Responsibilities:

• Manage cross functional teams to ensure enterprise governance and compliance initiatives align with strategic goals are met successfully, on time, and with budget.
• Manage cross functional teams to drive successful results on business required SOC 2 Type II audits that directly support revenue growth.
• Manage IPH regulatory engagements, stay abreast of future regulatory requirements and the business impact they may present.
• Manage IPH Enterprise Data Security and Governance initiatives and ensure alignment with regulatory requirements, internal policies, and industry best practice information security standards.
• Manage cross functional teams to ensure compliance with applicable regulations and business requirements (e.g., SOC 2, NYDFS, Delaware Insurance Data Security, PCI, HIPAA, GDPR) and influence executive leadership.
• Manage IPH enterprise data security and governance compliance initiatives.
• Oversee the timely and appropriate data breach communications to partners and clients.
• Create and lead cross functional teams as needed to successfully complete and submit required business partner information security questionnaires.
• Develop and manage IPH information security governance framework.
• Lead board and executive leadership compliance and governance-related initiatives.
• Develop and manage key risk indicators (KPI's) and escalate emerging risks to leadership.
• Analyze governance, risk, and compliance data to identify trends, gaps, and improvement opportunities.
• Ability to work independently on complex enterprise GRC initiatives.
• Mentor junior team members and contribute to team development.
• Stay current with emerging GRC technologies, cybersecurity risks, and regulatory changes.
• Promote a culture of security awareness and risk-informed decision-making.

Requirements:

• Master's degree in Information Security, Information Technology Management, Risk Management, or related field.
• Professional certifications such as CISSP, CISM, CRISC, CDPSE, or CISA are preferred.
• 8+ years of experience in information security governance, risk, and compliance leadership roles.
• Strong knowledge of security frameworks and standards (e.g., SOC 2, NIST SP 800-53, ISO 27001, PCI, HIPAA) and regulatory requirements (e.g., NYDFS, Delaware Insurance Data Security, PCI, HIPAA).
• Extensive experience with enterprise GRC platforms and tools.
• Excellent analytical, communication, and leadership skills.
• Demonstrated ability to effectively manage cybersecurity audits and risk assessments to positive outcomes.

Preferred Skills:

• Ability to manage multiple priorities and work cross-functionally.
• Expert in developing governance frameworks and reporting structures.
• Strong attention to detail and problem-solving capabilities.

All of our jobs come with great benefits including healthcare, parental leave and opportunities for career advancements. Some offerings are dependent upon the location of where you work and can include the following:

• Comprehensive full medical, dental and vision Insurance
• Basic Life Insurance at no cost to the employee
• Company paid short-term and long-term disability
• 12 weeks of 100% paid Parental Leave
• Health Savings Account (HSA)
• Flexible Spending Accounts (FSA)
• Retirement savings plan
• Personal Paid Time Off
• Paid holidays and company-wide Wellness Day off
• Paid time off to volunteer at nonprofit organizations
• Pet friendly office environment
• Commuter Benefits
• Group Pet Insurance
• On the job training and skills development
• Employee Assistance Program (EAP)

Interview Technology Notice:

Please note that phone and video interviews or screenings may be recorded and transcribed using interview technology to support our recruitment process.

By continuing with the interview, you consent to this use.

Text Messaging Notice:

If you provide a mobile phone number, you may receive job-related communications via text message. Message and data rates may apply.

You may opt out of text communications at any time by replying "STOP."