We are looking for an experienced IT Regulatory Compliance Manager to support a Contract engagement based in Philadelphia, Pennsylvania. This role will guide technology compliance efforts across security, privacy, and IT risk programs, helping the organization strengthen its control environment in both cloud and on-premise settings. The ideal candidate brings strong leadership, regulatory knowledge, and the ability to translate complex requirements into practical, scalable compliance processes.<br><br>Responsibilities:<br>• Direct reviews of technology control design and performance across cloud and on-premise environments, ensuring compliance activities align with organizational risk obligations.<br>• Oversee recurring and on-demand assessments for IT general controls, security controls, and privacy controls, and track corrective actions through resolution.<br>• Build and enhance automated compliance processes by leveraging system integrations, data aggregation, and repeatable monitoring approaches.<br>• Identify opportunities for continuous control monitoring and automated testing to improve efficiency and strengthen ongoing oversight.<br>• Maintain and refine information security and IT risk policies, standards, control libraries, and supporting awareness materials.<br>• Shape and communicate the broader IT compliance framework, including assessment practices, attestation activities, and issue management workflows.<br>• Collaborate with technology, security, and business stakeholders to promote effective management of enterprise technology risk.<br>• Support the evolution of IT and information security risk strategies, including risk assessment methods, reporting metrics, and scalable governance practices.<br>• Coordinate responses to external audits, regulatory examinations, and related compliance inquiries.<br>• Provide leadership and direction to compliance team members while fostering consistent execution of first-line and second-line responsibilities.
We are looking for an IT Risk and Compliance Analyst to support governance, risk, and compliance initiatives for a services organization in Philadelphia, Pennsylvania. This Long-term Contract position will focus on strengthening IT oversight practices, improving control maturity, and helping the business address regulatory and cybersecurity risk exposure. The role works closely with stakeholders across the organization to assess risks, support compliance efforts, and provide clear reporting that drives informed decision-making.<br><br>Responsibilities:<br>• Partner with cross-functional teams to build, refine, and maintain IT governance policies, standards, and operating frameworks that support business goals.<br>• Perform risk evaluations across technology and business functions, identify potential control weaknesses, and help develop practical mitigation plans.<br>• Track key risk indicators, highlight developing concerns, and elevate significant issues to leadership when timely action is needed.<br>• Contribute to third-party cybersecurity risk oversight by helping assess vendors and supporting processes that reduce external technology risk.<br>• Assist with compliance reviews and audit activities to confirm adherence to internal controls, regulatory expectations, and IT policy requirements.<br>• Examine compliance findings, determine underlying causes of issues, and recommend corrective actions that improve control effectiveness.<br>• Prepare summaries, dashboards, and presentations that communicate governance, risk, and compliance activity to management and other stakeholders.<br>• Establish and improve monitoring methods that measure compliance with IT controls, policies, and applicable requirements over time.<br>• Create consistent documentation standards for IT processes and control-related records so materials remain accurate, complete, and easy to access.<br>• Provide additional support on security and risk-related initiatives as assigned.