IT Regulatory Compliance Manager

We are looking for an experienced IT Regulatory Compliance Manager to support a Contract engagement based in Philadelphia, Pennsylvania. This role will guide technology compliance efforts across security, privacy, and IT risk programs, helping the organization strengthen its control environment in both cloud and on-premise settings. The ideal candidate brings strong leadership, regulatory knowledge, and the ability to translate complex requirements into practical, scalable compliance processes.

Responsibilities:

• Direct reviews of technology control design and performance across cloud and on-premise environments, ensuring compliance activities align with organizational risk obligations.
• Oversee recurring and on-demand assessments for IT general controls, security controls, and privacy controls, and track corrective actions through resolution.
• Build and enhance automated compliance processes by leveraging system integrations, data aggregation, and repeatable monitoring approaches.
• Identify opportunities for continuous control monitoring and automated testing to improve efficiency and strengthen ongoing oversight.
• Maintain and refine information security and IT risk policies, standards, control libraries, and supporting awareness materials.
• Shape and communicate the broader IT compliance framework, including assessment practices, attestation activities, and issue management workflows.
• Collaborate with technology, security, and business stakeholders to promote effective management of enterprise technology risk.
• Support the evolution of IT and information security risk strategies, including risk assessment methods, reporting metrics, and scalable governance practices.
• Coordinate responses to external audits, regulatory examinations, and related compliance inquiries.
• Provide leadership and direction to compliance team members while fostering consistent execution of first-line and second-line responsibilities.
• Bachelor’s degree in Computer Science, Information Technology, or a related technical field.
• At least 8 years of hands-on experience in governance, risk, and compliance, with significant emphasis on regulatory compliance and risk assessment activities.
• Minimum of 3 years of people leadership experience, including coaching, mentoring, and team development.
• Strong understanding of IT governance, risk, and compliance practices across both on-premise and cloud environments.
• Practical knowledge of regulatory and control frameworks relevant to cybersecurity, privacy, and financial or operational compliance obligations.
• Experience working with compliance and risk management platforms such as Archer, ServiceNow, or similar tools, along with strong Excel and data analysis capabilities.
• Excellent written and verbal communication skills, with a highly organized and thorough approach to work.
• Relevant advanced degrees or certifications in security, audit, risk, or compliance are preferred.