5,056 Risk Compliance jobs in the United States
Risk & Compliance Analyst
Posted 10 days ago
Job Viewed
Job Description
This job works collaboratively to support of all risk and compliance assessment activities of Highmark Health across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc. The incumbent will partner with the organizational risk and business partners, the technology organization, and global delivery teams to meet Highmark Health's mission requirements in a manner consistent with the enterprise risk appetite. This individual must have a proactive mindset and approach, and feel comfortable working in a highly matrixed environment.
Essential Responsibilities:
- Completes assessment activities according to the appropriate framework, including but not limited to NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, in order to identify, assess, prioritize, evaluate and address compliance, financial, information security, privacy, and other areas of risk. Prepares draft reports and other management reporting deliverables. Prepares all work paper and supporting documentation evidence according to audit quality standards in a consistent manner.
- Schedules, delivers, and follows-up to ensure risk questionnaires and other risk assessments are completed timely in order to ensure compliance requirements are met across the Enterprise. Assists in training and mentoring less experienced team members on multi-faceted engagements, platform customer dependencies, and assists with the review and interpretation of less-complex authoritative guidance.
- Delivers risk assessments to internal and external contacts. Assists with the review of inherent risk assessment results and the stratification of engagement risks, and assists with the development of assurance plans (e.g., on-site audit, contract review, financials assessment, purchasing data analysis) to address relevant risk areas and to ensure proper controls are implemented. Reviews and interprets information provided (including, but not limited to NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO reports) and assists with performing qualitative and quantitative impact assessments based on physical, technical, and administrative safeguards as well as contractual requirements; conducts additional information gathering and risk assessments with external points of contact, as-needed; documents and reports results.
- Documents and interprets complex data flow/ information sharing activities, customer integrations, and information safeguards into simplified and high-level terminology and/or process/data flows. Assists with maintaining enterprise supplier risk management reporting dashboards in RSA Archer applications in order to keep information complete, accurate, and current. Prepares and assists with the delivery of risk assurance reports to management.
- Assists with preparation of project plans to support risk assessment and risk decisioning processes in coordination with business owners and other stakeholders within task-based budgets. Collaborates with Information Security, Privacy, Procurement, Audit, Compliance, and other teams across the enterprise to align risk management objectives, practices and procedures.
- Maintains departmental desk-level procedures, assessment methodology, assessment procedures, questionnaires, training, etc. Reviews and documents activities which demonstrate and support compliance with departmental metrics, performance of internal control activities, awareness of contractual obligations, regulatory requirements, and assistance with responding to customer inquiries / audits.
- Interfaces with business areas, technical staff, project teams, and third parties to execute cross-functional risk assurance projects. Prepares materials to support communication of assessment results and findings with multiple stakeholder groups.
- Assists with providing input and consultation on risk and assurance requirements. Consults with other areas (e.g., Procurement, Privacy, Information Security, Legal) throughout the engagement lifecycle along with internal business and contract administration partners. Assists in contract reviews and providing timely feedback on contract terms and conditions.
- Other duties as assigned or requested.
Education:
Required:
- Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
Substitutions:
- 6 years of related and progressive experience in lieu of Bachelor's degree
Preferred:
- Master's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
Experience:
Required:
- 1 year in Audit and Compliance
- To Include: 1 year in Business Process Design
- 1 year in Project Management
Preferred:
- None
Licenses or Certifications:
Required:
- None
- Certified Public Accountant (CPA)
- Certified Information Systems Analyst (CISA)
- Certified Information Privacy Professional (CIPP)
- Certified Information Systems Security Professional (CISSP)
- Demonstrate expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly as applied to healthcare (payer and provider) business processes.
- Knowledge of relevant regulatory guidelines, vendor management, sourcing and procurement, and completing assessments of vendors
- Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff.
- Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team).
- Strong relationship building skills and ability to influence with and without authority in a matrixed organization.
- Leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results.
- High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions.
Preferred:
Skills:
Language (Other than English): None
Travel Requirement: 0% - 25%
Physical, Mental Demands and Working Conditions:
Position Type: Office-based
Teaches / trains others regularly: Occasionally
Travel regularly from the office to various work sites or from site-to-site: Rarely
Works primarily out-of-the office selling products/services (sales employees): Never
Physical work site required: Yes
Lifting: up to 10 pounds Constantly
Lifting: 10 to 25 pounds Occasionally
Lifting: 25 to 50 pounds Rarely
Risk & Compliance Analyst

Posted 4 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job works collaboratively to support of all risk and compliance assessment activities of Highmark Health across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc. The incumbent will partner with the organizational risk and business partners, the technology organization, and global delivery teams to meet Highmark Health's mission requirements in a manner consistent with the enterprise risk appetite. This individual must have a proactive mindset and approach, and feel comfortable working in a highly matrixed environment.
**ESSENTIAL RESPONSIBILITIES**
+ Completes assessment activities according to the appropriate framework, including but not limited to NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, in order to identify, assess, prioritize, evaluate and address compliance, financial, information security, privacy, and other areas of risk. Prepares draft reports and other management reporting deliverables.Prepares all work paper and supporting documentation evidence according to audit quality standards in a consistent manner.
+ Schedules, delivers, and follows-upto ensure risk questionnaires and other risk assessments are completed timely in order to ensure compliance requirements are met across the Enterprise.Assists in training and mentoring less experienced team members on multi-faceted engagements, platform customer dependencies, and assists with the review and interpretation of less-complex authoritative guidance.
+ Delivers risk assessments to internal and external contacts.Assists with the review of inherent risk assessment results and the stratification of engagement risks, and assists with the development of assurance plans (e.g., on-site audit, contract review, financials assessment, purchasing data analysis) to address relevant risk areas and to ensure proper controls are implemented.Reviews and interprets information provided(including, but not limited toNIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO reports) and assists with performing qualitative and quantitative impact assessments based on physical, technical, and administrative safeguards as well as contractual requirements; conducts additional information gathering and risk assessments with external points of contact, as-needed; documents and reports results.
+ Documents and interprets complex data flow/ information sharing activities, customer integrations, and information safeguards into simplified and high-level terminology and/or process/data flows.Assists with maintaining enterprise supplier risk management reporting dashboards in RSA Archerapplications in order to keep information complete, accurate, and current.Prepares and assists with the delivery of risk assurance reports to management.
+ Assists with preparation of project plans to support risk assessment and risk decisioning processes in coordination with business owners and other stakeholders within task-based budgets.Collaborates with Information Security, Privacy, Procurement, Audit, Compliance, and other teams across the enterprise to align risk management objectives, practices and procedures.
+ Maintains departmental desk-level procedures, assessment methodology, assessment procedures, questionnaires, training, etc.Reviews and documents activities which demonstrate and support compliance with departmental metrics, performance of internal control activities, awareness of contractual obligations, regulatory requirements, and assistance with responding to customer inquiries / audits.
+ Interfaces with business areas, technical staff, project teams, and third parties to execute cross-functional risk assurance projects. Prepares materials to support communication of assessment results and findings with multiple stakeholder groups.
+ Assists with providing input and consultation on risk and assurance requirements.Consults with other areas (e.g., Procurement, Privacy, Information Security, Legal) throughout the engagement lifecycle along with internal business and contract administration partners.Assists in contract reviews and providing timely feedback on contract terms and conditions.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**Substitution** **s**
+ 6 years of related and progressive experience in lieu of Bachelor's degree
**Preferred**
+ Master's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**EXPERIENCE**
**Required**
+ 1 year in Audit and Compliance
To Include:
+ 1 year in Business Process Design
+ 1 year in Project Management
**Preferred**
+ None
**LICENSES or CERTIFICATIONS**
**Required**
+ None
**Preferred** (any of the following)
+ Certified Public Accountant (CPA)
+ Certified Information Systems Analyst (CISA)
+ Certified Information Privacy Professional (CIPP)
+ Certified Information Systems Security Professional (CISSP)
**SKILLS**
+ Demonstrate expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly as applied to healthcare (payer and provider) business processes.
+ Knowledge of relevant regulatory guidelines, vendor management, sourcing and procurement, and completing assessments of vendors
+ Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff.
+ Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team).
+ Strong relationship building skills and ability to influence with and without authority in a matrixed organization.
+ Leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results.
+ High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions.
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Occasionally
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J267446
Risk & Compliance Analyst

Posted 4 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job works collaboratively to support of all risk and compliance assessment activities of Highmark Health across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc. The incumbent will partner with the organizational risk and business partners, the technology organization, and global delivery teams to meet Highmark Health's mission requirements in a manner consistent with the enterprise risk appetite. This individual must have a proactive mindset and approach, and feel comfortable working in a highly matrixed environment.
**ESSENTIAL RESPONSIBILITIES**
+ Completes assessment activities according to the appropriate framework, including but not limited to NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, in order to identify, assess, prioritize, evaluate and address compliance, financial, information security, privacy, and other areas of risk. Prepares draft reports and other management reporting deliverables.Prepares all work paper and supporting documentation evidence according to audit quality standards in a consistent manner.
+ Schedules, delivers, and follows-upto ensure risk questionnaires and other risk assessments are completed timely in order to ensure compliance requirements are met across the Enterprise.Assists in training and mentoring less experienced team members on multi-faceted engagements, platform customer dependencies, and assists with the review and interpretation of less-complex authoritative guidance.
+ Delivers risk assessments to internal and external contacts.Assists with the review of inherent risk assessment results and the stratification of engagement risks, and assists with the development of assurance plans (e.g., on-site audit, contract review, financials assessment, purchasing data analysis) to address relevant risk areas and to ensure proper controls are implemented.Reviews and interprets information provided(including, but not limited toNIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO reports) and assists with performing qualitative and quantitative impact assessments based on physical, technical, and administrative safeguards as well as contractual requirements; conducts additional information gathering and risk assessments with external points of contact, as-needed; documents and reports results.
+ Documents and interprets complex data flow/ information sharing activities, customer integrations, and information safeguards into simplified and high-level terminology and/or process/data flows.Assists with maintaining enterprise supplier risk management reporting dashboards in RSA Archerapplications in order to keep information complete, accurate, and current.Prepares and assists with the delivery of risk assurance reports to management.
+ Assists with preparation of project plans to support risk assessment and risk decisioning processes in coordination with business owners and other stakeholders within task-based budgets.Collaborates with Information Security, Privacy, Procurement, Audit, Compliance, and other teams across the enterprise to align risk management objectives, practices and procedures.
+ Maintains departmental desk-level procedures, assessment methodology, assessment procedures, questionnaires, training, etc.Reviews and documents activities which demonstrate and support compliance with departmental metrics, performance of internal control activities, awareness of contractual obligations, regulatory requirements, and assistance with responding to customer inquiries / audits.
+ Interfaces with business areas, technical staff, project teams, and third parties to execute cross-functional risk assurance projects. Prepares materials to support communication of assessment results and findings with multiple stakeholder groups.
+ Assists with providing input and consultation on risk and assurance requirements.Consults with other areas (e.g., Procurement, Privacy, Information Security, Legal) throughout the engagement lifecycle along with internal business and contract administration partners.Assists in contract reviews and providing timely feedback on contract terms and conditions.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**Substitution** **s**
+ 6 years of related and progressive experience in lieu of Bachelor's degree
**Preferred**
+ Master's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**EXPERIENCE**
**Required**
+ 1 year in Audit and Compliance
To Include:
+ 1 year in Business Process Design
+ 1 year in Project Management
**Preferred**
+ None
**LICENSES or CERTIFICATIONS**
**Required**
+ None
**Preferred** (any of the following)
+ Certified Public Accountant (CPA)
+ Certified Information Systems Analyst (CISA)
+ Certified Information Privacy Professional (CIPP)
+ Certified Information Systems Security Professional (CISSP)
**SKILLS**
+ Demonstrate expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly as applied to healthcare (payer and provider) business processes.
+ Knowledge of relevant regulatory guidelines, vendor management, sourcing and procurement, and completing assessments of vendors
+ Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff.
+ Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team).
+ Strong relationship building skills and ability to influence with and without authority in a matrixed organization.
+ Leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results.
+ High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions.
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Occasionally
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J267446
Risk & Compliance Consultant

Posted 5 days ago
Job Viewed
Job Description
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Risk & Compliance Consultant to join our team in Charlotte, North Carolina (US-NC), United States (US).
**Who We Are:**
NTT DATA America strives to hire exceptional, innovative, and passionate individuals who want to grow with us. Our Financial Services Consulting team includes management consultants who help financial institutions respond to digital proliferation by focusing on customer-oriented services, just-in-time services, and modularized product offerings. We're a partner who's there for our client's transformation journey - from strategy and delivery to achieving business outcomes. Our client base and expertise span strategic financial services institutions including top 10 U.S. banks, global payment providers, and top wealth management firms. Learn more about how we partner with our Banking & Financial Services clients: You'll Help Us:**
As a Risk & Compliance Consultant you will play a role in advancing our firm's mission to help clients across banking, capital markets, wealth management and insurance effectively navigate today's risk management and compliance requirements to protect institutional assets against threats and risks to business profitability. Join us in making a meaningful impact on financial services risk management and compliance excellence.
**How We Will Help You:**
Joining NTT DATA is not only a job, but a chance to grow your career. We are committed to supporting your professional growth, development, and overall success. By joining our team, you will work collaboratively as part of a client-facing team to deliver value to our clients and help them meet their business objectives. You will regularly interact with and learn from our industry experts and more experienced team members in driving business solutions and outcomes to help our client reduce risk and stay compliant as they achieve their digital, data and transformational goals.
**Why the Role Is Important: **
Our Risk & Compliance Consulting practice specialties include operational risk management, internal and external compliance, Financial Crimes prevention, Governance Risk and Compliance (GRC) capabilities, digital fraud solutions, Operational Resilience and Technology Risk Management. This position plays a vital role in assisting our practice and our clients in this area.
**Once You Are Here, You Will: **
+ Work on large scale projects with complex business or technical issues.
+ Build skills toward becoming a technical expert or advisor for one or more solutions.
+ Participate in projects where analysis of programs, systems or data requires an in-depth evaluation of complex business processes, system processes, and industry standards.
+ Mentor and review the work of less experienced employees.
+ Support the analysis of schedules, costs and documentation to ensure assigned projects come to successful conclusion.
+ Assist in the preparation of project proposals and cost estimates.
+ Assist with project initiation, project risk assessment, project team startup, project execution, and post-project review.
+ Participate and often lead process improvement task forces.
+ Contribute to the development of leading-edge consulting solutions.
+ Develop and maintain effective relationships with junior executives in targeted companies.
**Required Qualifications: **
+ Bachelor's degree in management consulting, business, computer science or a related field
+ 3+ years of experience in Risk and/or Compliance supporting the Financial Services industry
+ 2+ years of experience in a client-facing role that required daily client engagement and delivery excellence to complete client projects
+ Experience in the financial services industry
**Preferred Skills: **
+ MBA
+ Big 4 Management Consulting experience
+ **Experience in one or more of the areas below:**
1. - Financial Crimes, including AML Risk Assessment, KYC (CDD+EDD), transaction monitoring and sanctions screening
2. - Fraud Management, including synthetic and digital fraud
3. - Governance Risk and Compliance (GRC) Business and Technology, including direct experience with GRC technologies and Risk platforms to support broader enterprise needs
4. - Technology Risk Management frameworks such as NIST 800-53, COBIT, COSO, FFIEC
5. - Operational Resilience concepts such as Business Continuity, Disaster Recovery and Crisis Management.
6. - First and second line of defense controls management, including direct experience with risk identification, taxonomies, controls analysis, controls implementation/automation
7. - Data privacy, including understanding of GDPR and CCPA standards, experience in advising clients as it relates to usage and applicability of data standards
**Ideal Mindset: **
+ Commitment to Compliance: Maintain a proactive approach to identifying and addressing compliance risks, with a focus on protecting institutions and their stakeholders.
+ Analytical Thinking: Utilize strong analytical skills to derive insights, make informed decisions, and implement effective solutions.
+ Ethical Integrity: Uphold the highest standards of ethical conduct and integrity in all professional interactions. Demonstrate transparency, accountability, and a commitment to ethical business practices in compliance management and client relationships.
**About NTT DATA**
NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com ( DATA endeavors to make_** **_ **_accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at_** **_ **_._** **_This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here ( . If you'd like more information on your EEO rights under the law, please click here ( . For Pay Transparency information, please click here ( ._**
Risk & Compliance Consultant

Posted 5 days ago
Job Viewed
Job Description
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Risk & Compliance Consultant to join our team in Charlotte, North Carolina (US-NC), United States (US).
**Who We Are:**
NTT DATA America strives to hire exceptional, innovative, and passionate individuals who want to grow with us. Our Financial Services Consulting team includes management consultants who help financial institutions respond to digital proliferation by focusing on customer-oriented services, just-in-time services, and modularized product offerings. We're a partner who's there for our client's transformation journey - from strategy and delivery to achieving business outcomes. Our client base and expertise span strategic financial services institutions including top 10 U.S. banks, global payment providers, and top wealth management firms. Learn more about how we partner with our Banking & Financial Services clients: You'll Help Us:**
As a Risk & Compliance Consultant you will play a role in advancing our firm's mission to help clients across banking, capital markets, wealth management and insurance effectively navigate today's risk management and compliance requirements to protect institutional assets against threats and risks to business profitability. Join us in making a meaningful impact on financial services risk management and compliance excellence.
**How We Will Help You:**
Joining NTT DATA is not only a job, but a chance to grow your career. We are committed to supporting your professional growth, development, and overall success. By joining our team, you will work collaboratively as part of a client-facing team to deliver value to our clients and help them meet their business objectives. You will regularly interact with and learn from our industry experts and more experienced team members in driving business solutions and outcomes to help our client reduce risk and stay compliant as they achieve their digital, data and transformational goals.
**Why the Role Is Important: **
Our Risk & Compliance Consulting practice specialties include operational risk management, internal and external compliance, Financial Crimes prevention, Governance Risk and Compliance (GRC) capabilities, digital fraud solutions, Operational Resilience and Technology Risk Management. This position plays a vital role in assisting our practice and our clients in this area.
**Once You Are Here, You Will: **
+ Work on large scale projects with complex business or technical issues.
+ Build skills toward becoming a technical expert or advisor for one or more solutions.
+ Participate in projects where analysis of programs, systems or data requires an in-depth evaluation of complex business processes, system processes, and industry standards.
+ Mentor and review the work of less experienced employees.
+ Support the analysis of schedules, costs and documentation to ensure assigned projects come to successful conclusion.
+ Assist in the preparation of project proposals and cost estimates.
+ Assist with project initiation, project risk assessment, project team startup, project execution, and post-project review.
+ Participate and often lead process improvement task forces.
+ Contribute to the development of leading-edge consulting solutions.
+ Develop and maintain effective relationships with junior executives in targeted companies.
**Required Qualifications: **
+ Bachelor's degree in management consulting, business, computer science or a related field
+ 3+ years of experience in Risk and/or Compliance supporting the Financial Services industry
+ 2+ years of experience in a client-facing role that required daily client engagement and delivery excellence to complete client projects
+ Experience in the financial services industry
**Preferred Skills: **
+ MBA
+ Big 4 Management Consulting experience
+ **Experience in one or more of the areas below:**
1. - Financial Crimes, including AML Risk Assessment, KYC (CDD+EDD), transaction monitoring and sanctions screening
2. - Fraud Management, including synthetic and digital fraud
3. - Governance Risk and Compliance (GRC) Business and Technology, including direct experience with GRC technologies and Risk platforms to support broader enterprise needs
4. - Technology Risk Management frameworks such as NIST 800-53, COBIT, COSO, FFIEC
5. - Operational Resilience concepts such as Business Continuity, Disaster Recovery and Crisis Management.
6. - First and second line of defense controls management, including direct experience with risk identification, taxonomies, controls analysis, controls implementation/automation
7. - Data privacy, including understanding of GDPR and CCPA standards, experience in advising clients as it relates to usage and applicability of data standards
**Ideal Mindset: **
+ Commitment to Compliance: Maintain a proactive approach to identifying and addressing compliance risks, with a focus on protecting institutions and their stakeholders.
+ Analytical Thinking: Utilize strong analytical skills to derive insights, make informed decisions, and implement effective solutions.
+ Ethical Integrity: Uphold the highest standards of ethical conduct and integrity in all professional interactions. Demonstrate transparency, accountability, and a commitment to ethical business practices in compliance management and client relationships.
**About NTT DATA**
NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com ( DATA endeavors to make_** **_ **_accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at_** **_ **_._** **_This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here ( . If you'd like more information on your EEO rights under the law, please click here ( . For Pay Transparency information, please click here ( ._**
Manager Risk & Compliance Management

Posted 4 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job is responsible for the day-to-day direction of all risk and compliance assessment activities of Highmark Health across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc. The incumbent will partner with the organizational risk and business partners, the technology organization, and global delivery teams to meet Highmark Health's mission requirements in a manner consistent with the enterprise risk appetite. The incumbent must have a proactive mindset and approach, and feel comfortable working in a highly matrixed environment.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities to include, but are not limited to: involved in hiring and termination decisions, coaching and development, rewards and recognition, performance management and staff productivity.Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Establishes the appropriate methodology to be used and procedures to be performed for third-party risk, technology, operational compliance, and security programs, across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc.This includes establishing necessary statistical sampling and utilizing various auditing methodologies.
+ Coordinates and manage audits of departments across the enterprise to ensure compliance with policies, schedule, scope and accuracy with the latest laws and regulations, accuracy and completeness, business unit compliance, program training and communications delivery.
+ Partners with functional subject matter experts around the organization, develops annual plan to address third-party strategic, operational, security, reputational, and financial risks for the Organization's family of companies.
+ Establishes and monitoris Key Performance Indicators (KPIs) to ensure risk assessments are completed in accordance with Service Level Agreements, privacy-security policies, contractual obligations.
+ Manages program to perform on-site third party audits, regulatory reviews, vendor risk reviews,and validates necessary remediations to ensure alignment to relevant compliance guidelines.
+ Negotiates on behalf of the organization in third-party, regulatory and/or compliance engagements to ensure appropriate security, audit, regulatory and operational risk terms are appropriately addressed. Interact with vendor and business unit personnel at all levels and effectively communicate risks, expectations, and alternative strategies to mitigate the Organization's concerns over security, audit, and risk provisions.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**Substitutions**
+ 6 years of related and progressive experience in lieu of Bachelor's degree
**Preferred**
+ Master's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**EXPERIENCE**
**Required**
+ 5 years of interaction with regulators, auditors, and oversight bodies
To Include:
+ 3 years in a leadership role, preferably in an Audit or Compliance discipline in a Healthcare or Healthcare related industry
+ 3 years overseeing privacy, risk, audit, and/or compliance teams
**Preferred**
+ 3 years with contract negotiations
**LICENSES or CERTIFICATIONS**
**Required**
+ None
**Preferred**
+ Certified Public Account (CPA)
+ Certified Information Security Auditor (CISA)
+ Certified Information Privacy Professional (CIPP)
+ Certified Information Systems Security Professional (CISSP)
+ Certified in Healthcare Compliance (CHC)
+ Certified Internal Auditor (CIA)
**SKILLS**
+ Demonstrate expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly as applied to healthcare (payer and provider) business processes.
+ Knowledge of relevant regulatory guidelines, vendor management, sourcing and procurement, and completing assessments of vendors
+ Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff.
+ Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team).
+ Strong relationship building skills and ability to influence with and without authority in a matrixed organization.
+ Developed leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results.
+ High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions.
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Frequently
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J267445
Manager Risk & Compliance Management

Posted 4 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job is responsible for the day-to-day direction of all risk and compliance assessment activities of Highmark Health across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc. The incumbent will partner with the organizational risk and business partners, the technology organization, and global delivery teams to meet Highmark Health's mission requirements in a manner consistent with the enterprise risk appetite. The incumbent must have a proactive mindset and approach, and feel comfortable working in a highly matrixed environment.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities to include, but are not limited to: involved in hiring and termination decisions, coaching and development, rewards and recognition, performance management and staff productivity.Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Establishes the appropriate methodology to be used and procedures to be performed for third-party risk, technology, operational compliance, and security programs, across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc.This includes establishing necessary statistical sampling and utilizing various auditing methodologies.
+ Coordinates and manage audits of departments across the enterprise to ensure compliance with policies, schedule, scope and accuracy with the latest laws and regulations, accuracy and completeness, business unit compliance, program training and communications delivery.
+ Partners with functional subject matter experts around the organization, develops annual plan to address third-party strategic, operational, security, reputational, and financial risks for the Organization's family of companies.
+ Establishes and monitoris Key Performance Indicators (KPIs) to ensure risk assessments are completed in accordance with Service Level Agreements, privacy-security policies, contractual obligations.
+ Manages program to perform on-site third party audits, regulatory reviews, vendor risk reviews,and validates necessary remediations to ensure alignment to relevant compliance guidelines.
+ Negotiates on behalf of the organization in third-party, regulatory and/or compliance engagements to ensure appropriate security, audit, regulatory and operational risk terms are appropriately addressed. Interact with vendor and business unit personnel at all levels and effectively communicate risks, expectations, and alternative strategies to mitigate the Organization's concerns over security, audit, and risk provisions.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**Substitutions**
+ 6 years of related and progressive experience in lieu of Bachelor's degree
**Preferred**
+ Master's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**EXPERIENCE**
**Required**
+ 5 years of interaction with regulators, auditors, and oversight bodies
To Include:
+ 3 years in a leadership role, preferably in an Audit or Compliance discipline in a Healthcare or Healthcare related industry
+ 3 years overseeing privacy, risk, audit, and/or compliance teams
**Preferred**
+ 3 years with contract negotiations
**LICENSES or CERTIFICATIONS**
**Required**
+ None
**Preferred**
+ Certified Public Account (CPA)
+ Certified Information Security Auditor (CISA)
+ Certified Information Privacy Professional (CIPP)
+ Certified Information Systems Security Professional (CISSP)
+ Certified in Healthcare Compliance (CHC)
+ Certified Internal Auditor (CIA)
**SKILLS**
+ Demonstrate expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly as applied to healthcare (payer and provider) business processes.
+ Knowledge of relevant regulatory guidelines, vendor management, sourcing and procurement, and completing assessments of vendors
+ Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff.
+ Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team).
+ Strong relationship building skills and ability to influence with and without authority in a matrixed organization.
+ Developed leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results.
+ High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions.
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Frequently
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J267445
Be The First To Know
About the latest Risk compliance Jobs in United States !
Manager Risk & Compliance Management
Posted 9 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job is responsible for the day-to-day direction of all risk and compliance assessment activities of Highmark Health across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc. The incumbent will partner with the organizational risk and business partners, the technology organization, and global delivery teams to meet Highmark Health's mission requirements in a manner consistent with the enterprise risk appetite. The incumbent must have a proactive mindset and approach, and feel comfortable working in a highly matrixed environment.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities to include, but are not limited to: involved in hiring and termination decisions, coaching and development, rewards and recognition, performance management and staff productivity.Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Establishes the appropriate methodology to be used and procedures to be performed for third-party risk, technology, operational compliance, and security programs, across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc.This includes establishing necessary statistical sampling and utilizing various auditing methodologies.
+ Coordinates and manage audits of departments across the enterprise to ensure compliance with policies, schedule, scope and accuracy with the latest laws and regulations, accuracy and completeness, business unit compliance, program training and communications delivery.
+ Partners with functional subject matter experts around the organization, develops annual plan to address third-party strategic, operational, security, reputational, and financial risks for the Organization's family of companies.
+ Establishes and monitoris Key Performance Indicators (KPIs) to ensure risk assessments are completed in accordance with Service Level Agreements, privacy-security policies, contractual obligations.
+ Manages program to perform on-site third party audits, regulatory reviews, vendor risk reviews,and validates necessary remediations to ensure alignment to relevant compliance guidelines.
+ Negotiates on behalf of the organization in third-party, regulatory and/or compliance engagements to ensure appropriate security, audit, regulatory and operational risk terms are appropriately addressed. Interact with vendor and business unit personnel at all levels and effectively communicate risks, expectations, and alternative strategies to mitigate the Organization's concerns over security, audit, and risk provisions.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**Substitutions**
+ 6 years of related and progressive experience in lieu of Bachelor's degree
**Preferred**
+ Master's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**EXPERIENCE**
**Required**
+ 5 years of interaction with regulators, auditors, and oversight bodies
To Include:
+ 3 years in a leadership role, preferably in an Audit or Compliance discipline in a Healthcare or Healthcare related industry
+ 3 years overseeing privacy, risk, audit, and/or compliance teams
**Preferred**
+ 3 years with contract negotiations
**LICENSES or CERTIFICATIONS**
**Required**
+ None
**Preferred**
+ Certified Public Account (CPA)
+ Certified Information Security Auditor (CISA)
+ Certified Information Privacy Professional (CIPP)
+ Certified Information Systems Security Professional (CISSP)
+ Certified in Healthcare Compliance (CHC)
+ Certified Internal Auditor (CIA)
**SKILLS**
+ Demonstrate expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly as applied to healthcare (payer and provider) business processes.
+ Knowledge of relevant regulatory guidelines, vendor management, sourcing and procurement, and completing assessments of vendors
+ Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff.
+ Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team).
+ Strong relationship building skills and ability to influence with and without authority in a matrixed organization.
+ Developed leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results.
+ High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions.
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Frequently
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J268692
Manager Risk & Compliance Management
Posted 9 days ago
Job Viewed
Job Description
Highmark Health
**Job Description :**
**JOB SUMMARY**
This job is responsible for the day-to-day direction of all risk and compliance assessment activities of Highmark Health across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc. The incumbent will partner with the organizational risk and business partners, the technology organization, and global delivery teams to meet Highmark Health's mission requirements in a manner consistent with the enterprise risk appetite. The incumbent must have a proactive mindset and approach, and feel comfortable working in a highly matrixed environment.
**ESSENTIAL RESPONSIBILITIES**
+ Perform management responsibilities to include, but are not limited to: involved in hiring and termination decisions, coaching and development, rewards and recognition, performance management and staff productivity.Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
+ Establishes the appropriate methodology to be used and procedures to be performed for third-party risk, technology, operational compliance, and security programs, across a broad range of frameworks including NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO, etc.This includes establishing necessary statistical sampling and utilizing various auditing methodologies.
+ Coordinates and manage audits of departments across the enterprise to ensure compliance with policies, schedule, scope and accuracy with the latest laws and regulations, accuracy and completeness, business unit compliance, program training and communications delivery.
+ Partners with functional subject matter experts around the organization, develops annual plan to address third-party strategic, operational, security, reputational, and financial risks for the Organization's family of companies.
+ Establishes and monitoris Key Performance Indicators (KPIs) to ensure risk assessments are completed in accordance with Service Level Agreements, privacy-security policies, contractual obligations.
+ Manages program to perform on-site third party audits, regulatory reviews, vendor risk reviews,and validates necessary remediations to ensure alignment to relevant compliance guidelines.
+ Negotiates on behalf of the organization in third-party, regulatory and/or compliance engagements to ensure appropriate security, audit, regulatory and operational risk terms are appropriately addressed. Interact with vendor and business unit personnel at all levels and effectively communicate risks, expectations, and alternative strategies to mitigate the Organization's concerns over security, audit, and risk provisions.
+ Other duties as assigned or requested.
**EDUCATION**
**Required**
+ Bachelor's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**Substitutions**
+ 6 years of related and progressive experience in lieu of Bachelor's degree
**Preferred**
+ Master's Degree in Accounting, Finance, Business Administration/Management, Information Technology, Pre-Law, or related field
**EXPERIENCE**
**Required**
+ 5 years of interaction with regulators, auditors, and oversight bodies
To Include:
+ 3 years in a leadership role, preferably in an Audit or Compliance discipline in a Healthcare or Healthcare related industry
+ 3 years overseeing privacy, risk, audit, and/or compliance teams
**Preferred**
+ 3 years with contract negotiations
**LICENSES or CERTIFICATIONS**
**Required**
+ None
**Preferred**
+ Certified Public Account (CPA)
+ Certified Information Security Auditor (CISA)
+ Certified Information Privacy Professional (CIPP)
+ Certified Information Systems Security Professional (CISSP)
+ Certified in Healthcare Compliance (CHC)
+ Certified Internal Auditor (CIA)
**SKILLS**
+ Demonstrate expert knowledge of business and technology processes, risk and control frameworks, and assessment methodologies, particularly as applied to healthcare (payer and provider) business processes.
+ Knowledge of relevant regulatory guidelines, vendor management, sourcing and procurement, and completing assessments of vendors
+ Excellent resource and project planning capabilities, decision making skills, history of results-oriented delivery, and effective team building across a cross-campus and diverse team of management and staff.
+ Strong written and verbal communication skills for diverse audiences (senior management, board, peer, and team).
+ Strong relationship building skills and ability to influence with and without authority in a matrixed organization.
+ Developed leadership qualities with an ability to motivate and inspire a group of individuals to achieve superior results.
+ High capacity to think analytically, interpret information / observations, apply judgment and make effective, strategic decisions.
**Language (Other than English):**
None
**Travel Requirement:**
0% - 25%
**PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS**
**Position Type**
Office-based
Teaches / trains others regularly
Frequently
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Constantly
Lifting: 10 to 25 pounds
Occasionally
Lifting: 25 to 50 pounds
Rarely
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement_** _: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies._
_As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy._
_Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J268692
Finance, Risk & Compliance Accountant
Posted today
Job Viewed
Job Description
Responsibilities:
- Review transactions, contracts, and accounting treatments, and prepare or approve manual journal entries to ensure accurate financial records.
- Manage accounting processes for data center and facilities projects, including handling Capex/Opex accruals, mass asset additions, and Asset Retirement Obligation (ARO) creation and confirmations. Execute internal controls and validation procedures, and maintain essential financial trackers such as non-GAAP schedules and location matrices.
- Utilize Oracle Financials, Hyperion, and SQL to support financial process management, reporting, and data analysis.
- Collaborate cross-functionally with internal and external teams, facilitate FP&A sync meetings, and provide ad hoc financial and technical analysis as needed.
- Analyze large data sets to identify process gaps, and design and implement process improvements to enhance operational efficiency.
Must-Have Skills:
- Expertise in Financial Accounting and Auditing:
- Over 5 years of experience in auditing financial statements, financial accounting, or related fields.
- Skilled in managing accounting activities for data center construction projects, including month-end closing and SOX compliance controls.
- Proven track record of overseeing balance sheet accounts and sub-ledgers of varying complexity.
- Collaboration and Communication Across Functions:
- Strong capability to collaborate effectively with cross-functional teams and partners, both internal and external, at all organizational levels.
- Build and sustain robust relationships with Infrastructure Business Partners.
- Offer accounting expertise and process guidance to support informed decision-making.
- Process Enhancement and Data Analysis:
- Experienced in analyzing large datasets and partnering with business teams to drive impactful changes. Proficient in identifying process inefficiencies and independently designing and implementing corrective solutions.
- Skilled in optimizing or redesigning existing workflows to align with evolving business requirements.
- System Implementation and User Acceptance Testing (UAT):
- Experience in conducting User Acceptance Testing during system implementations to ensure functionality meets business needs.
Nice-to-Have Skills:
- Big 4 Audit Background and CPA Certification:
- Preferred experience working at Big 4 audit firms.
- CPA certification is highly desirable.
- Proficiency with Oracle Financials and Hyperion
- Knowledge of Oracle Financials and Hyperion systems is advantageous for managing accounting operations.
- Technical and Analytical Support Capabilities:
- Skilled in delivering ad hoc financial and technical analyses.
- Able to support special projects as required.
- Experience Handling Large Data Sets
- SQL Skills
- Infrastructure Industry Experience
- Expertise in Internal Controls
Education / Experience:
- Experience in financial accounting and auditing, ideally gained at Big 4 firms, along with CPA certification
- 5+ years of experience
Pay Transparency: The typical base pay for this role across the U.S. is: 45.00 - 50.00/hr. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience and the benefits package you select. Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, 10 paid days off, 401(k) plan participation, commuter benefits and life and disability insurance.
For information about our collection, use, and disclosure of applicant's personal information as well as applicants' rights over their personal information, please see our Privacy Policy (
Aditi Consulting LLC uses AI technology to engage candidates during the sourcing process. AI technology is used to gather data only and does not replace human based decision making in employment decisions. By applying to this position, you agree to Aditi's use of AI technology, including calls from an AI Voice Recruiter.
#AditiConsulting
# 25-21490