Security Policy and Compliance Manager - Virtual

Alight Solutions; Deerfield (IL); On-site; USD 105,000 - 120,000; Full time

Job summary

Alight Solutions, based in Deerfield, IL, seeks a Security Policy Lead to develop and mature the security policy program, coordinate audits, and coach teams to ensure regulatory compliance across the enterprise.

This role partners with global security teams within the Global Security & Compliance group, requires 6+ years in information security and strong communication skills; travel may be required.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, or a related field.
• Experience with technical, procedural, or policy writing.
• Experience in audit frameworks (e.g., NIST/ISO).
• Certifications in line with Cybersecurity and/or Project Management are a plus.

Responsibilities

• Help establish security policies, procedures, and guidelines on various information security controls.
• Partner with global security teams to review, update, publish security policies and standards.
• Identify security issues and gaps with policies, standards, and procedures among employees and third parties.
• Map legal and regulatory requirements onto global policies and procedures.
• Perform audit attestation activities and manage evidence for audits.

Skills

Technical policy writing

Audits and controls

Cybersecurity frameworks

Cross-functional collaboration

Project management

Education

Bachelor’s degree in Information Systems, Cybersecurity, or related field

Job description

Our Story

At Alight, we believe a company’s success starts with its people. Alight embraces values that come directly from our people – purposeful, human, united and growth-minded – reflecting our inclusive culture and promise that our clients expect. We are passionate about connecting purpose with impact. Alight empowers clients to build a healthier and more financially secure workforce by unifying the benefits ecosystem across health, wealth, wellbeing, navigation, and absence management.

Our Benefits

With a comprehensive total rewards package, Alight offers programs and plans that support your mind, body, wallet, and life. Benefits include health, dental and vision coverages starting Day One. Additionally, Alight colleagues enjoy wellbeing programs, retirement plans with contribution matching, generous time off, parental leave, continuing education, and career growth opportunities – all within a thriving global organization.

• Please NOTE: Applicants must reside in the United States in one of the 50 States or the District of Columbia in order to be considered for this role. **
• US Citizenship requirements- as this role supports services provided to the federal government and/or a federal government contractor, proof will be required to verify US citizenship status at time of hire.**

Job Description

As a member of Alight Global Security’s Security & Compliance team, this position is responsible for the required updates, reviews, creation, and maturity of Alight’s security policies program. This role will be a subject matter expert for security policy helping inform colleagues and teams on required actions for Alight to remain in compliance with our policy and helping to track and manage any witnessed nonconformities. Additionally, this position will help manage audits and their applicable controls. That will include coaching colleagues on what they need to do to meet and demonstrate each control for an audit and help speak to and present collected evidence with various external auditors.

Key Responsibilities

• Help establish security policies, procedures, and guidelines on various information security controls
• Partner with the global security teams to review, update, publish Alight’s global security polices and standards to continuously improve and mature Alight’s global security policy program
• Identify security issues and gaps with security policies, standards, and procedures among employees, contractors, alliances, and other third parties.
• Map legal and regulatory requirements and developments onto global policies/procedures and make suggestions where needed
• Perform all audit attestation activities relating to aligned audits ensuring work and deliverables in accordance with agreed upon timeframes and organizational procedures, standards, and protocols
• Interpret patterns of non-compliance discovered through audit to determine impact on levels of risk and work with the appropriate resources to drive higher levels of compliance.
• Owns and manages any gaps coming from the policy or audit process through remediation with stakeholders reporting milestones and elevate when necessary
• Work with internal subject matter experts to lead them in understanding the controls and required evidences
• Partners cross-functionally, inter-departmentally and with the external auditor to understand the process from an end-to-end perspective and appropriately and effectively communicates with these partners
• Works as part of a team and exhibits strong interpersonal and team skills
• Ensures frequent communication of test and/or audit results and analysis on a timely basis to the appropriate stakeholders and senior management within the audit department
• Through the advanced use of technology (i.e. MS Excel, Corporation’s Proprietary Insurance Enrollment & Administration System.) concisely measure, monitor and report metrics to senior management of the audit department and prepare snapshots of information in a synthesized and polished manner
• Design, implement & mature security and risk management controls library, controls methodology & testing criteria;
• Responsible for staying current on regulatory rules and changes within the industry
• Leads and/or actively participates in meetings with business unit to discuss test and/or audit scoping, testing progress and results
• Interacts and partners with senior management to understand the risks within the business, business changes and other significant events that could significantly impact the business and/or the audit plan
• Communicates with regulators, external auditors, and various risk management committees within the Corporation as part of ongoing continuous monitoring which assists in managing the audit plan

Required Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, or a related field and minimum 6 years of relevant experience. Additional years of relevant experience will be considered in lieu of a degree.
• Certifications in line with Cybersecurity and/or Project Management a plus
• Experience with technical, procedural, or policy writing
• Experience in audit frameworks (ie NIST/ISO)

Preferred Qualifications

• Demonstrated experience in working in a geographically dispersed team with global scope and responsibilities
• Experience facilitating business process design as it relates to managing identities and access privileges
• CISA certifications beneficial
• Excellent collaboration skills – must be eager to work as part of a cohesive team and work as a partner to other teams within Alight., locally and globally
• Exceptional communication skills, including the ability to gather relevant data and information, actively listen, dialogue freely, verbalize ideas effectively, negotiate tense situations successfully, and manage and resolve conflict
• Adaptability, flexibility, and ability to work as part of a team across functional boundaries or in an individual capacity
• Willingness to work outside of regular business hours as required which can include evenings, weekends, and holidays.
• Ability to handle and maintain the integrity and confidentiality of highly sensitive material and information

Application and Interview

By applying for a position with Alight, you understand that, should you be made an offer, it will be contingent on your undergoing and successfully completing a background check consistent with Alight’s employment policies. Background checks may include some or all the following based on the nature of the position: SSN/SIN validation, education verification, employment verification, and criminal check, search against global sanctions and government watch lists, credit check, and/or drug test. You will be notified during the hiring process which checks are required by the position.

Alight requires all virtual interviews to be conducted on video. Please be aware that Alight is a camera-on culture and may require occasional travel to one of our physical office locations.

Our commitment to Inclusion

We celebrate differences and believe in fostering an environment where everyone feels valued, respected, and supported. We know that diverse teams are stronger, more innovative, and more successful.

At Alight, we welcome and embrace all individuals, regardless of their background, and are dedicated to creating a culture that enables every employee to thrive. Join us in building a brighter, more inclusive future.

Equal Opportunity Policy Statement

Alight is an Equal Employment Opportunity employer and does not discriminate against anyone based on sex, race, color, religion, creed, national origin, ancestry, age, physical or mental disability, medical condition, pregnancy, marital or domestic partner status, citizenship, military or veteran status, sexual orientation, gender, gender identity or expression, genetic information, or any other legally protected characteristics or conduct covered by federal, state, or local law. In addition, we take affirmative action to employ disabled persons, disabled veterans, and other covered veterans.

Alight provides reasonable accommodations to the known limitations of otherwise qualified employees and applicants for employment with disabilities and sincerely held religious beliefs, practices and observances, unless doing so would result in undue hardship. Applicants for employment may request reasonable accommodations/modifications by contacting their recruiter.

Authorization to work in the Employing Country

Applicants for employment in the country in which they are applying (Employing Country) must have work authorization that does not, now or in the future, require sponsorship of a visa for employment authorization in the Employing Country and with Alight.

Note, this job description does not restrict management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.

Salary Pay Range

Minimum : 105,000.00 USD

Maximum : 120,000.00 USD

Pay Transparency Statement

Alight considers a variety of factors in determining whether to extend an offer of employment and in setting the appropriate compensation level, including, but not limited to, a candidate’s experience, education, certification/credentials, market data, internal equity, and geography. Alight makes these decisions on an individualized, non-discriminatory basis. Bonus and/or incentive eligibility are determined by role and level. Alight also offers a comprehensive benefits package; for specific details on our benefits package, please visit: Wellbeing and Benefits Selector Page - Alight

DISCLAIMER

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

Equal Employment Opportunities

Alight Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, pregnancy, childbirth or related medical condition, veteran, marital, parental, citizenship, or domestic partner status, or any other status protected by applicable national, federal, state or local law. Alight Solutions is committed to a diverse workforce and is an affirmative action employer.

Great Place to Work

Thanks to the work of every colleague, Alight has received multiple awards of recognition including “Great Place to Work” for the past 7 years and Fortune’s “Best Companies to Work For.” To learn more about our company culture and awards.

Flexible Working

So that you can be your best at work and home, we consider flexible working arrangements wherever possible. Alight has been a leader in the flexible workspace and “Top 100 Company for Remote Jobs” 6 years in a row.