Sr. Technology Compliance Specialist (#Hybrid - based at our Chicago HQ near O'Hare Airport)

In this role, you will Ensure infrastructure operations teams are complaint with industry regulations such as GDPR, HIPAA, ISO 27001. Manage governance processes for internal business technology review boards and lead audits, mitigate risks, and collaborate with legal, security, and IT departments to ensure a cohesive approach to technology compliance. Create and maintain infrastructure operations technology documents, including policies, standards, and procedures related to network and security architecture, server infrastructure, cloud and desktop infrastructure.
Responsibilities

• Oversee the maintenance and creation of official Infrastructure Operations Technology documents, including policies, standards, and procedures.
• Develop and facilitate the Infrastructure Operations training attestation program to ensure comprehensive understanding and adherence to compliance requirements.
• Conduct regular reviews and assessments of technology processes, systems, and controls to identify and address potential compliance gaps.
• Stay current with industry regulations, standards, and frameworks (e.g., GDPR, HIPAA, ISO 27001) and ensure practices are aligned with these requirements.
• Identify and mitigate risks by adhering to policies, enhancing governance efficiency, and improving stakeholder satisfaction.
  Lead participation and engagement in internal audits and assessments to evaluate compliance effectiveness and identify opportunities for improvement.
• Represent and coordinate infrastructure teams during external audits and assessments conducted by regulatory bodies or third-party auditors.
• Cross-train and develop team members in technical compliance activities and functions to build a versatile and knowledgeable team.
• Collaborate with departments such as legal, security, and IT to ensure a cohesive and comprehensive approach to technology compliance.
• Manage governance processes for internal business technology review boards, ensure compliance and operational efficiency in areas such as disaster recovery planning and IT asset management.
• Serve as the primary point of contact for infrastructure operations audit and compliance issues, provide metrics and insights on network security, system uptime and change failure and incident response.
• Participate in IT Service Management and provide coverage to functions, including change, problem, and incident management, to ensure robust backup capabilities and efficient incident response.

Education

• Bachelors Degree - Computer Science, Information Technology or Related - Minimum

Years of Experience

• 5 years - ITSM, Technology Risk and Compliance, or Related - Minimum

In Lieu of Education

• 8 years - Technology Compliance, Risk Management or Related

Certifications:

• Certified Information Systems Auditor (CISA), Certified Information Privacy Professional (CIPP) or Related - Preferred

Compensation & Benefits:
Typical hiring range:‏‏‎ ‎$67,100‏‏‎ ‎-‏‏‎ ‎$94.750 Annually. Actual compensation will be determined using factors such as experience, skills & knowledge.
Additional Compensation: Annual performance bonus
‎Benefits: Alliant provides a benefits package including health care, vision, dental, and 401k with employer match.
Additional Benefits:

• Work from home up to 3 days a week
• Paid parental leave
• Employee discount programs
• Time off including paid personal and sick days
• 11 paid holidays
• Education reimbursement

*Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours, and job status such as regular full-time, regular part-time, or temporary employment.
Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.
The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.