IT Security Manager

📋 Description

• • Manage and advance the IT security, risk, and audit compliance program through planning, scheduling, coordinating, reviewing, and reporting on the work of IT compliance teams.
• • Conduct and supervise complex internal and external audits, including third-party vendor audits and client-initiated IT audits, ensuring adherence to regulatory and compliance standards.
• • Develop, maintain, and enforce IT compliance policies, procedures, schedules, and audit programs at both departmental and enterprise levels.
• • Serve as the primary representative of Sedgwick IT to clients, carriers, and external stakeholders, handling critical and sensitive communications regarding IT security and compliance.
• • Respond directly to inquiries from clients, carriers, and legal counsel on IT compliance and security matters, providing clear and professional guidance.
• • Assess risk factors within IT systems to identify high-risk areas and develop, manage, and execute risk remediation plans to completion.
• • Prepare detailed audit reports, analyses, and recommendations using advanced written communication skills, ensuring accuracy and clarity for executive and external audiences.
• • Stay current with changes in professional standards, industry laws, guidelines, and audit requirements, and communicate these updates effectively to internal teams and enterprise personnel.
• • Coach, train, and mentor IT compliance and audit staff, creating awareness programs to strengthen organizational understanding of security and compliance protocols.
• • Consult with administrators, management, and staff on operational control issues related to computerized information systems, providing expert advice and guidance.
• • Lead recruitment and hiring activities for IT audit, compliance, and security roles, ensuring alignment with organizational standards and team needs.
• • Manage the IT compliance budget, recommending and overseeing the allocation of funds for risk management and compliance initiatives.
• • Follow up on audit findings to verify that management has implemented appropriate corrective actions.
• • Train other audit staff in the use of computerized audit techniques and methods for reviewing and analyzing computerized information systems.
• • Maintain expert-level knowledge of state-of-the-art technology, systems, and equipment relevant to IT security and compliance operations.
• • Conduct or supervise IT operational, compliance, financial, and investigative audits as required by business or regulatory needs.
• • Attend and participate in continuing professional education courses and training to maintain industry certifications and expertise.
• • Support organizational quality programs and adhere to company personnel policies, including performance reviews, development plans, and staff motivation.
• • Travel as required to meet client, vendor, or internal audit obligations.
• • Maintain strict confidentiality of sensitive information and demonstrate professional demeanor under high-stress conditions.
• • Balance multiple concurrent projects with strong organizational, time management, and prioritization skills, working both independently and as part of a collaborative team.