IS Risk and Compliance Manager

ourhrconnect; Columbia (SC); Hybrid; USD 90,000 - 120,000; Full time

Job summary

BlueCross BlueShield of South Carolina is seeking an IT Risk and Compliance Manager to oversee the internal risk assessment and ensure regulatory compliance across I/S processes. You will lead a team, coordinate audits, and partner with security officers to interpret evolving requirements.

The role is a full-time hybrid position in Columbia, SC, with responsibilities for risk mitigation, policy development, and regulatory documentation. Travel between buildings may be required.

Qualifications

• Bachelor's degree required.
• Minimum 7 years of IT experience with leadership experience.
• Strong knowledge of regulatory requirements and risk management.
• Excellent communication and problem-solving abilities.

Responsibilities

• Lead internal risk assessment and compliance programs.
• Coordinate audits, prepare responses, and track remediation.
• Develop and maintain regulatory documentation and policies.
• Collaborate with System Security Officer(s) to interpret regulations.

Skills

Leadership

Regulatory compliance

Risk management

Audit/Security

Communication skills

Education

Bachelor's degree

Tools

MS Office

Audit software

Job description

Summary

Why should you join the BlueCross BlueShield of South Carolina family of companies?
Other companies come and go, but for more than seven decades we've been part of the national landscape, with our roots firmly embedded in the South Carolina community. We are the largest insurance company in South Carolina ... and much more. We are one of the nation's leading administrators of government contracts. We operate one of the most sophisticated data processing centers in the Southeast. We also have a diverse family of subsidiary companies that allows us to build on a variety of business strengths. We deliver outstanding service to our customers. If you are dedicated to the same philosophy, consider joining our team!

Description

Position Purpose:
Manage the internal risk assessment and compliance function to ensure I/S is compliant with government and industry regulations. Work with corporate and I/S Risk Management teams to develop and implement internal control policies in a wide variety of I/S processes.

Location

This position is a full-time hybrid (40-hours/week) Monday-Friday in a typical office environment. You will work an 8-hour shift scheduled during normal business hours (may require extended hours based on business needs). You may be required to travel between buildings. This role is located at 2401 Faraway Drive, Columbia, SC 29223

Sponsorship

This position is not eligible for sponsorship now or in the future.

Security and Clearance

This position requires a security clearance which requires U.S. Citizenship to obtain.
This position also requires CMS clearance.

What You Will Do

• Responsible for recruiting and hiring, coaching and mentoring, monitoring and evaluation, and addressing all disciplinary issues in a timely manner. Encourage staff in creating and maintaining a work environment with high morale and employee satisfaction through support of professional development, training, career growth, and rewarding high performance.
• Promote compliance with regulatory requirements and I/S best practices, especially with respect to information security and risk mitigation. Work with System Security Officer(s) to interpret changing security and compliance regulations and the high impact to I/S.
• Manage and conduct risk assessment and compliance activities. Prepare assessment reports. Make recommendations for risk mitigation, process, control, and/or cost improvement approaches.
• Provide oversight regarding risk management and compliance activities across I/S functional areas. Meet with auditors, prepare management responses, identify owners of security controls and ensure appropriate staff attends audit meetings, and review final reports to ensure responses are accurate.
• Monitor activities to ensure customer expectations and requirements are being met, and that existing and new applications and/or infrastructure elements are in compliance with department standards.
• Oversee the development and maintenance of regulatory documentation. Review departmental documentation, policies and procedures for accuracy, completeness, and relevance to overall company goals.

To Qualify For This Position, You Will Need

• Required Education:
  Bachelor's
• Degree Equivalency:
  An additional 4 years job related work experience or Associate's plus an additional 2 years job related work experience.
• Required Work Experience:
  7 years of job-related IT experience. Prior team lead, supervisor, or management experience OR equivalent military experience in grade E4 or above.
• Required Skills and Abilities:
  Knowledge of business and management principles involved in strategic planning, resource allocation, human resources modeling, leadership technique, production methods, and coordination of people and resources. Able to identify complex problems and review related information to develop and evaluate options and implement solutions. Demonstrated flexibility for adapting to both changing business and client needs, and a changing technical environment. Strong technical knowledge base in related area. Strong interpersonal and oral/written communication skills. Demonstrated analytical and decision-making skills. Excellent and effective communication, customer service and time-management skills. Ability to communicate complex information with understanding to a variety of audiences who have different levels of experience and knowledge.
• Required Software and Other Tools:
  General word processing, database, and spreadsheet applications. Standard office equipment; phone, copier, fax, computer, etc.

We Prefer That You Have

• Strong managerial skills
• Understanding of Risk Management
• Ability to communicate to executives
• Understanding of AI
• Understanding of organizational policies and procedures
• Strong collaboration skills

Preferred Licenses and Certificates

• Comptia Security +
• ISACA Certified Information Security Manager (CISM) (certifications must be obtained within 1 year of hire date )

Work Environment

Fast paced, multi-platformed environment which may req