About the role
Leads enterprise-wide regulatory change management and governance across Privacy, Security, and Technology Compliance (PSTC), ensuring the organization stays compliant with evolving privacy, security, AI, and healthcare regulations . Serves as the primary SME for AI-related regulatory requirements , coordinating impact assessments, compliance gap analysis, remediation, and implementation activities.
Leads enterprise-wide regulatory change management and governance across Privacy, Security, and Technology Compliance (PSTC), ensuring the organization stays compliant with evolving privacy, security, AI, and healthcare regulations . Serves as the primary SME for AI-related regulatory requirements , coordinating impact assessments, compliance gap analysis, remediation, and implementation activities. Partners with Legal, Government Relations, IT, Privacy, Security, and other stakeholders to assess proposed and enacted regulations, develop organizational responses, and drive policy and process updates.
Oversees regulatory monitoring, reporting, compliance readiness, and the optimization of tools such as the enterprise Regulatory Change Management (eRCM) platform , while providing leadership on significant regulatory changes including HIPAA and emerging AI requirements. This individual contributor position is accountable for multiple large-scale ITRM service delivery and engagements, including managing resources and financials.
These engagements include compliance assessments and consulting projects that span multiple businesses, as well as driving and overseeing the design and implementation of appropriate controls. This role is also responsible for the direction of performance metrics and reporting tools, including the identification of new methods for compiling and correlating data. This position is expected to work collaboratively with leadership to develop the overall ITRM strategy and define goals, objectives, deliverables, and guardrails within the governance framework to ensure the development and implementation of efficient, effective, measurable, and sustainable ITRM processes and controls.
Essential
Drives the execution of multiple work streams by identifying customer and operational needs; developing and updating new procedures and policies; gaining cross-functional support for objectives and priorities; translating business strategy into actionable business requirements; obtaining and distributing resources; setting standards and measuring progress; removing obstacles that impact performance; guiding performance and developing contingency plans accordingly; solving highly complex issues; and influencing the completion of project tasks by others.
Practices self-leadership and promotes learning in others by soliciting and acting on performance feedback; building collaborative, cross-functional relationships; communicating information and providing advice to drive projects forward; adapting to competing demands and new responsibilities; providing feedback to others, including upward feedback to leadership; influencing, mentoring, and coaching team members; fostering open dialogue amongst team members; evaluating and responding to the strengths and weaknesses of self and unit members; and adapting to and learning from change, difficulties, and feedback.
Drives ITRM processes and/or methodology for designated ITRM initiatives by leading or directing team members in the documentation of process and/or service requirements and acceptance criteria from process owners and key stakeholders; working collaboratively with leadership to develop the ITRM strategy; defining goals, objectives, deliverables, and guardrails within the governance framework to ensure the development and implementation of efficient, effective, measurable, and sustainable ITRM processes and controls; and driving the direction of performance metrics and reporting tools, suggesting process improvements for gathering metrics and identifying new methods for compiling and correlating data sets within the organization.
Executes and plans large complex ITRM compliance assessments and consulting projects spanning multiple business units and operational areas by leading intake, planning and coordination activities for new or revisions to technology systems or services; and driving and overseeing the design and implementation of appropriate controls through the sustainment phase. Leads multiple large-scale ITRM service delivery and engagements with full responsibility and accountability for outcomes by overseeing multiple workstreams, including stakeholder communications and team mentorship; managing and monitoring financials; allocating resources; establishing schedules; and making task assignments.
Qualifications Knowledge, Skills and Abilities: (Core) Ambiguity/Uncertainty Management Attention to Detail Business Knowledge Communication Critical Thinking Cross-Group Collaboration Decision Making Dependability Diversity, Equity, and Inclusion Support Drives Results Facilitation Skills Health Care Industry Influencing Others Integrity Learning Agility Organizational Savvy Problem Solving Short- and Long-term Learning & Recall Teamwork Topic-Specific Communication Knowledge, Skills and Abilities: (Functional) Applied Data Analysis Business Operations Conflict Resolution Cost Estimation Delegation IT Compliance IT Governance IT Industry: Trends & Directions IT Quality Assurance IT Standards, Procedures & Policies Information & Data Security Information Security Audits Managing Diverse Relationships Mentoring and Coaching Negotiation Organizational Skills Service Focus System and Technology Integration Technical Documentation
Minimum five (5) years in an informal leadership role working with business or technical teams. Bachelors Degree in MIS, Information Security, Accounting, Finance, Audit, or related field and Minimum ten (10) years experience in IT risk management, compliance, auditing, or information security, including Minimum two (2) years developing IT compliance frameworks or ITRM methodologies. Additional equivalent work experience in a directly related field may be substituted for the degree requirement.
Four (4) years of work experience in a role requiring interaction with executive leadership (e.g., Vice President level and above) Five (5) years experience writing ITRM documentation and assessment reports. Minimum 8-10 years of experience in privacy, compliance, regulatory affairs, risk management, information security, healthcare compliance, or related discipline. Demonstrated experience leading enterprise regulatory change management initiatives.
Experience interpreting and implementing complex regulatory requirements across large organizations. Experience working with cross-functional stakeholders including Legal, Compliance, Government Relations, Compliance teams Strong understanding of healthcare, privacy, and security regulatory frameworks. Knowledge of HIPAA, HITECH, Information Blocking regulations, state privacy laws, FTC requirements, healthcare technology regulations, and emerging AI governance frameworks.
Scheduled Weekly Hours: 40
Day Workdays: Mon, Tue, Wed, Thu, Fri, Working Hours Start: 08:00 AM Working Hours End: 04:00 PM Job
Full-time Job Type: Standard Employee Status: Regular Worker Location: Remote Employee Group/Union Affiliation: NUE-PO-01|NUE|Non Union Employee Job Level: Individual Contributor Department: Po/Ho Corp - Compl Privacy and Security - 0308
$184500 - $238700 / year Travel: No