Associate Director, Regulatory Risk, Compliance & Accreditation (Cybersecurity)

TL;DR

Associate Director, Regulatory Risk, Compliance & Accreditation (Cybersecurity): Managing information security risks and compliance across the federation with an accent on PCI DSS, HIPAA, and NIST CSF frameworks. Focus on conducting accreditation audits, performing technical risk assessments, and ensuring regulatory alignment for affiliate organizations.

Location: Remote (Must be based in the US; E-Verify participant)

Salary: $125,000 - $130,000 a year

Company

The nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care and sex education in the US.

What you will do

• Serve as the IS&T Program Expert and Accreditor for the PPFA Accreditation & Certification Program.
• Lead PCI DSS compliance activities, including self-assessment questionnaires, vulnerability scanning, and managing AOCs.
• Conduct risk assessments, accreditation interviews, and technical analyses aligned with NIST CSF and HIPAA Security.
• Evaluate security systems, controls, and policies of affiliate organizations and track corrective actions.
• Collaborate with Information Security, Finance, and General Counsel teams to mitigate high-risk findings.
• Provide operational support to the Third Party Risk Management (TPRM) Program.

Requirements

• Bachelor’s degree and 5+ years of industry experience.
• Must be based in the United States.
• Minimum 2 years of experience in governance, risk, and compliance (GRC).
• Deep understanding of HIPAA Security, PCI DSS, NIST, and CIS standards.
• Proficiency in technical and non-technical writing and communication.
• High proficiency in Google products.

Nice to have

• Industry certifications such as CISA, CRISC, or GSEC.

Culture & Benefits

• "In This Together" cultural ethos fostering belonging and professional growth.
• Full-time union position with associated protections.
• Flexible remote work environment.
• Commitment to racial equity, diversity, and inclusion in all operations.