Director of IT Compliance and Certification

Company: Xerox Corporation
Location: Cheyenne
Posted on: May 20, 2023

Job Description:

Press space or enter keys to toggle section visibility Country United States Department Information Management Date Monday, May 15, 2023 Working time Full-time Ref# 20023009 Job Level Executive Manager Job Type Experienced Job Field Information Management Seniority Level Mid-Senior Level Description & RequirementPress space or enter keys to toggle section visibility About Xerox Holdings Corporation: For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we've expanded into software and services to sustainably power today's workforce. From the office to industrial environments, our differentiated business solutions and financial services are designed to make every day work better for clients - no matter where that work is being done. Today, Xerox scientists and engineers are continuing our legacy of innovation with disruptive technologies in digital transformation, augmented reality, robotic process automation, additive manufacturing, Industrial Internet of Things and cleantech. Learn more at www.xerox.com and explore our commitment to diversity and inclusion. About FITTLE: FITTLE offers innovative business financial solution to help businesses adapt and grow. Formerly known as Xerox Financial Solutions (XFS), FITTLE works with organizations of all sizes to provide financing for a range of offerings including IT Services, Software, audio visual and security hardware, 3D Printing equipment and other office equipment. Programs include bundled support and maintenance, multi-brand servicing and partner solutions. FITTLE is the primary equipment lease provider for Xerox Business Solutions (XBS) and has broadened its portfolio of assets financed to include numerous growth opportunities outside of Xerox equipment and services, such as the expansion of its dealer relationships, financing a wider breadth of products and building relationships with new vendors. The Role: The Director of IT Compliance and Certification is responsible for designing and implementing IT controls for systems used in a financial services company. This role will manage projects to achieve certifications, including an audited SOC 2 Type 2 report and ISO 27001, while also serving as a liaison to both internal and external auditors. The Director will interact with customers considering the use of our financial services, ensuring they are well-informed about the company's commitment to IT security and compliance. Additionally, this role will work with the Chief Information Security Officer to complement the organization's cybersecurity objectives, establish compliance policies and standards for system design and IT projects, and evaluate other certifications that might be appropriate for a financial services company to define a comprehensive compliance strategy. This role is an exciting opportunity for an experienced professional with a strong background in IT compliance and a proven track record of successful project management. The ideal candidate will be able to balance technical expertise with strong leadership abilities to drive results and maintain a secure and compliant IT environment. Scope: Specific: --- Design and implement IT controls for systems used in a financial services company to ensure compliance with industry standards and regulations. --- Manage projects to achieve certifications, including SOC 2 Type 2 reports and ISO 27001, ensuring timely completion and adherence to certification requirements. --- Serve as a liaison to internal and external auditors, facilitating audits and ensuring all necessary documentation and evidence are provided. --- Interact with customers considering the use of our financial services, providing them with information about the company's commitment to IT security and compliance. --- Develop, implement, and maintain IT compliance policies, procedures, and guidelines to continuously improve the company's security posture and adherence to regulatory requirements. --- Collaborate with the Chief Information Security Officer to complement the organization's cybersecurity objectives and align IT compliance efforts with overall security strategies. --- Establish compliance policies and standards for system design and IT projects, ensuring that compliance considerations are integrated from the outset. --- Evaluate other certifications that might be appropriate for a financial services company and define a comprehensive compliance strategy that addresses industry-specific needs and standards. --- Monitor and track compliance-related performance metrics, reporting findings to senior management and stakeholders. --- Collaborate with various teams across the organization to integrate IT compliance considerations into business processes and technology initiatives. --- Provide training and guidance to employees on IT compliance matters, ensuring a thorough understanding of relevant regulations and best practices. --- Continuously assess and mitigate risks related to IT compliance and certification projects. --- Stay informed about the latest trends and developments in IT compliance, adapting the company's approach as needed to maintain a strong security posture. Skills and Qualifications: --- Bachelor's degree in computer science, Information Technology, or a related field. --- A minimum of 7 years of experience in IT compliance, with at least 3 years in a leadership role. --- Strong understanding of IT compliance regulations and standards, including SOC 2 Type 2 and ISO 27001. --- Experience in the financial services industry, with a solid understanding of industry-specific regulations and requirements. --- Proven experience in managing teams and multiple projects simultaneously. --- Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and stakeholders. --- Strong problem-solving and critical-thinking skills. --- Familiarity with various IT compliance tools and software, such as GRC platforms or audit management systems. --- Relevant certifications, such as CISA, CISSP, or ISO 27001 Lead Auditor, are preferred. Location: Virtual, on Eastern Time or willing to work on an ET zone schedule. #LI-SR2

Keywords: Xerox Corporation, Cheyenne , Director of IT Compliance and Certification, Executive , Cheyenne, Wyoming