Manager, Information Security Compliance (SOX ITGC) Position Available In Williamson, Tennessee
Tallo's Job Summary: The Manager, Information Security Compliance (SOX ITGC) role at Ardent Health involves developing and maintaining SOX ITGC policies, managing the Risk and Control Matrix, monitoring compliance, and conducting risk assessments. Responsibilities include policy implementation, control matrix maintenance, compliance monitoring, risk assessments, KPI monitoring, training programs, and audit coordination. Qualifications include a Bachelor's degree, 5 years of related experience, and certifications such as CPA, CISA, CRISC, or CISSP. Preferred experience in healthcare or publicly traded companies, as well as familiarity with Ardent Key Systems and scripting languages like SQL and PowerShell.
Job Description
Overview Ardent Health is a leading provider of healthcare in growing mid-sized urban communities across the U.S. With a focus on people and investments in innovative services and technologies, Ardent is passionate about making healthcare better and easier to access. Through its subsidiaries, Ardent delivers care through a system of 30 acute care hospitals, 24,000+ team members and more than 280 sites of care with over 1,800 affiliated providers across six states.
POSITION SUMMARY
The Manager, Information Security Compliance (SOX ITGC) will ensure the development and maintenance of
SOX ITGC
policies and procedures, manage the Risk and Control Matrix (RACM), monitor compliance, and conduct risk assessments. This position will work closely with IT leadership, subject matter experts, risk management, compliance, and Internal Audit to maintain a robust
SOX ITGC
compliance program Responsibilities Develop and implement policies and procedures to ensure compliance with SOX 404 regulations related to IT General Controls. Regularly review and update policies to reflect current standards and practices. Maintain the Risk and Control Matrix (RACM) by ensuring current control descriptions are accurately stated, effective and align with SOX objectives. Continuously monitor the organization’s adherence to SOX requirements, internal policies, and industry standards. Conduct systematic risk assessments to identify, evaluate, and prioritize risks related to SOX compliance. Facilitate team meetings to discuss compliance issues and updates. Design and monitor KPI’s indicating the continued operating effectiveness of IT controls. Develop and conduct training programs to educate control owners on SOX compliance requirements. Coordinate internal audits to evaluate the effectiveness of IT controls and ensure compliance with SOX 404 regulations. Work with internal and external auditors to provide necessary documentation and support during audit processes.
Qualifications Education & Experience:
Bachelor’s degree in Information Technology, Cybersecurity, Business Administration, or a related field. Five years of experience in information security compliance, IT Audit, or a related field. Experience working in highly ambiguous environments, with the capability to independently identify problems, develop solutions, and drive initiatives to completion. Certifications such as CPA, CISA, CRISC, or CISSP.. preferred Experience in the Healthcare industry and/or publicly traded companies, preferred. Experience with
Ardent Key Systems:
Epic, Lawson, Active Directory, and SailPoint, preferred. Experience with scripting languages such as SQL and PowerShell, preferred.
Knowledge, Skills & Abilities:
Strong understanding of IT General Controls (ITGCs) and their role in SOX compliance, as well as familiarity with IT infrastructure and security architecture. Ability to understand business issues and objectives and translate them into compliance solutions. Familiarity with Microsoft O365 (word, teams, etc.) and ServiceNow. preferred. Exposure to Alteryx or related data analytics and automation tools, preferred #LI-AG1
Qualifications:
Education & Experience:
Bachelor s degree in Information Technology, Cybersecurity, Business Administration, or a related field. Five years of experience in information security compliance, IT Audit, or a related field. Experience working in highly ambiguous environments, with the capability to independently identify problems, develop solutions, and drive initiatives to completion. Certifications such as CPA, CISA, CRISC, or CISSP.. preferred Experience in the Healthcare industry and/or publicly traded companies, preferred. Experience with
Ardent Key Systems:
Epic, Lawson, Active Directory, and SailPoint, preferred. Experience with scripting languages such as SQL and PowerShell, preferred.
Knowledge, Skills & Abilities:
Strong understanding of IT General Controls (ITGCs) and their role in SOX compliance, as well as familiarity with IT infrastructure and security architecture. Ability to understand business issues and objectives and translate them into compliance solutions. Familiarity with Microsoft O365 (word, teams, etc.) and ServiceNow. preferred. Exposure to Alteryx or related data analytics and automation tools, preferred #LI-AG1
