Associate Director, Regulatory Risk, Compliance & Accreditation

• Serve as an Information Security & Technology Program Expert and Accreditor for the PPFA Accreditation & Certification Program.
• Manage PCI DSS compliance activities across the federation.
• Provide support to the Third Party Risk Management Program as needed.
• Evaluate security and technology systems, controls, and policies.
• Write reports interpreting assessment results and enumerating findings.
• Conduct risk assessments and technical analyses to determine areas of risk and non-compliance.
• Use security knowledge and technical skills to identify, assess, and document risks.
• Review documentation, third party assessments, and audit samples for compliance.
• Execute accreditation processes including attestation review and technical security control analysis.
• Escalate potential high or critical risk accreditation findings.
• Communicate professionally with technical, non-technical, and executive stakeholders.
• Support the PPFA TPRM team as needed.

• Bachelor’s degree and 5+ years of industry experience required.
• Experience with compliance requirements and standards such as HIPAA Security, PCI DSS, NIST is required.
• Minimum of 2 years of experience in governance, risk, and compliance (GRC), auditing, accreditation, or IT/Information Security controls.
• Deep understanding of IT and information security environments and administration.
• Strong written and verbal communication skills.

Pay range: $125K - $130K