IT Compliance Manager

Job Description

The RMS Compliance Manager is responsible for ensuring that the company conducts its business in full compliance with all applicable national laws and regulatory requirements. This role includes the creation, review, enforcement, and oversight of company policies, procedures, and industry best practices to support a strong culture of compliance and ethical operations.

Duties and Responsibilities

• Conduct compliance and risk assessments, including internal control testing.
• Prepare for and respond to external audits, regulatory inquiries, and legal requests.
• Manage third-party vendor risk assessments and ongoing monitoring.
• Oversee incident and breach response, including investigation, notification, and remediation.
• Maintain and enhance SOC 2 controls, documentation, and evidence management.
• Track and validate remediation efforts to ensure control effectiveness.
• Develop and enforce policies related to PHI, data classification, encryption, access controls, and data retention.
• Coordinate regulatory and privacy aspects of incident and breach response, Ensure notification obligations are met.
• Evaluate business systems and operations for regulatory and ethical compliance.
• Draft, update, and implement corporate compliance policies and procedures.
• Lead mandatory compliance training programs (e.g., security awareness, HIPAA) and manage LMS tracking and reporting.
• Conduct phishing simulations and targeted security awareness initiatives.
• Partner with cross-functional leaders to ensure operational compliance.
• Perform other related duties as assigned.

Qualifications

• Working knowledge of applicable regulatory frameworks (e.g., HIPAA, SOC 2, ISO 27001, or industry-specific standards).
• Experience supporting audits, regulatory examinations, and control assessments.
• Strong understanding of risk management principles and internal control design.
• Professional certifications such as CISSP, CISM, CISA, CRCM, CCEP, or similar preferred.
• Excellent analytical, problem-solving, and documentation skills.
• Strong written and verbal communication skills with the ability to interface across technical and non-technical teams.
• Proficiency with Microsoft Office and compliance documentation tools.

Education/Experience

• Bachelor’s degree in business, Legal Studies, Compliance, Information Security, Risk Management, or related field.
• 3–5+ years of experience in compliance, risk management, audit, or information security.
• Demonstrated experience developing or maintaining policies, conducting risk assessments, and supporting remediation efforts.
• Familiarity with industry regulations and regulatory reporting requirements relevant to the organization.

Environmental Conditions

Indoor climate-controlled environment. Moderate to quiet noise level.

Physical requirements

While performing the duties of this Job, the employee is regularly required to communicate verbally and in the written form. The employee is physically required to utilize a laptop and other electronic devices effectively. The employee must lift and/or move up to 20 pounds (laptop computer, bag, and accessories). Specific vision abilities required by this job include close vision and distance vision.

All applicants are subject to drug screens and background checks per company policies.