Remote: Compliance & Security Program Manager, Managed Services

Nelnet, Inc.

United States

Remote

USD 70,000 - 100,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSA and FSA

401K/student loan repayment

Life insurance & AD&D

Employee assistance program

Employee stock purchase program

Tuition reimbursement

Performance-based incentives

Short- and long-term disability

Wellness program

Job summary

CampusGuard, a Nelnet Company, is hiring for a senior role focused on program development and consulting to help higher education and related sectors achieve and maintain PCI DSS, GLBA, and related compliance programs. You will lead multi-stakeholder engagements, develop foundational governance artifacts, and supervise the annual compliance lifecycle across decentralized institutions.

The role requires deep experience in IT compliance and program management, with a track record of delivering

Qualifications

Bachelor's degree in information systems, business, or a related field or an equivalent combination of education and experience.
5+ years of progressive experience in program/project management, IT compliance, information security, or IT governance.
Demonstrated end-to-end ownership of a compliance or information security program, including stakeholder management up to the executive level.
Working knowledge of at least one major compliance framework (e.g., PCI DSS, GLBA), with the ability to build depth in others.
Highly organized and self-directed, able to manage multiple concurrent customer engagements from inception through post-implementation, including plans, schedules, and budgets.

Responsibilities

Assess a customer's current compliance posture and design a scalable, right-sized program that fits their size, structure, budget, and risk tolerance.
Author the program's foundational artifacts — charter, governance structure, policies, roles and responsibilities, escalation paths, and compliance calendar — and establish merchant/departmental inventories, scope definitions, and data flow documentation.
Define the metrics and reporting cadence by which the customer's leadership will judge the program's health, and advise on organizational placement — who owns compliance and what committee it reports through.
Lead the planning, execution, and delivery of customer PCI DSS, GLBA, and related compliance initiatives, applying a hybrid methodology that adapts to shifting scope and standards.
Develop and maintain schedules, work breakdown structures, RACI matrices, and risk/issue logs, coordinating stakeholders across IT, security, treasury/bursar, athletics, advancement, financial aid, and vendors.
Own the annual compliance lifecycle (scoping, evidence collection, SAQ/AOC, ASV scans, remediation tracking) and serve as the customer's primary point of contact, maintaining artifacts in CampusGuard Central.
Train and coach customer staff to operate the program independently; develop customer-facing playbooks, runbooks, checklists, and templates; structure engagements with a deliberate handoff in mind.