Information Technology

Job Overview

Come join the Intuit Information Security Organization at Intuit. We are looking for an innovative professional to join a world class team. The Intuit Information Security (IIS) organization is changing the way we look at security and compliance. As the compliance landscape expands with SOC 2, ISO 27001, PCI DSS, CCPA/GDPR, NIST800-53, NY DFS Part 500, multi-state audits, etc., our need to scale to demonstrate compliance and effective risk management is becoming more critical within our internal environment as well as with our third parties.

We are looking for motivated, passionate Technical Compliance Managers who will be transforming the traditional check the box compliance process to an automated, on-demand demonstrable compliance model.

This professional will improve and scale the regulatory and customer assurance compliance program by driving end to end compliance program initiatives, testing the compliance environment for early signs of non-compliance, driving the creation of automated evidence collection to reduce the audit fatigue, while working cross functionally with our global business units and functional groups and creating compelling and insightful compliance dashboards.

This professional will be translating security frameworks technical controls into language for non-security team members to understand and implement, managing remediation of non-compliance to closure and managing risks with data security compliance. Intuit prides itself on being innovative, bold, and passionate.

This is an exciting position supporting our most important regulatory compliance like SOC2, PCI, ISO and NIST compliance priorities as we leverage the power of the cloud and AI at scale. The Staff Technical Compliance Manager has the opportunity to innovate in a cloud environment and re-imagine compliance working across Intuit and with the business units as well as our functional group partners in IT, Legal, Privacy and Procurement.

Qualifications

• 7 years working in an IT audit/risk management / IT compliance role Demonstrated experience with controls definition, development, implementation, and assessment 
• Functional knowledge of multiple security domains and information security industry standards and best practices Understanding of cyber risks management practices at financial services institutions.
• Strong knowledge and experience with operational risk management, covering the full lifecycle of activities, including risk identification, assessment, mitigation, monitoring, and reporting.
• Understanding of regulatory requirements and expectations related to cyber risk 
• Extensive knowledge in various compliance frameworks and regulations (CCPA, GDPR, PCI, NIST SP 800-53, ISO 27001, SOC 1/2, NY DFS) around privacy and security, as well as audit management.
• Solid experience managing compliance initiatives for cloud platforms and interacting with external auditors and regulators. 
• Knowledge of cloud security, cloud Security certification is a plus 
• Ability to identify and recommend tools, processes, and software to automate and continuously improve compliance practices 
• Experience in building a collaborative, performance-driven culture that builds bridges with other functional groups across the enterprise and maintains positive working relationships 
• Ability to influence across all levels of the organization 
• Drive, determination, and the ability to overcome roadblocks and initial objections.
• Strong project management skills 
• Must be accountable and take ownership of compliance and risk management initiatives 
• Strong written and verbal communication skills Must possess strong consulting, documentation, and presentation skills 
• Good organizational skills, proactive and self-sufficient with a proven ability to work independently and prioritize deliverables.
• Bachelor's degree in computer science or information systems or equivalent field or equivalent relevant experience; passion in coding 
• CISSP or CISA/CISM preferred 

Responsibilities

• Lead and manage all data security compliance activities including SOC2, PCI, ISO, NIST, CCPA/GDPR 
• Lead and manage cybersecurity external audits from regulators, examiners, auditors 
• Drive analysis and adoption of new compliance frameworks e.g., new PCI DSS released standards 
• Evangelize Intuit unified controls to drive control owner awareness and education to ensure controls are implemented, maintained and compliant 
• Work across organizational boundaries to drive implementation of compliance requirements and security controls.
• Define compliance procedures and practices and influence stakeholders to drive appropriate alignment and acceptance.
• Create continuous view of compliance dashboards to bring risk visibility to senior leaders and ensure any impact to compliance is quickly reported and addressed 
• Identify control weakness in security systems by using continuous testing through automation.
• Partner across teams to define roadmaps, project plans, and ensure compliance deliverables or remediation plans remain on-track.
• Support creation of information security policies, standards, and requirements 
• Partner with business units and functional groups including legal/privacy and HR to drive end to end remediation of compliance deficiencies to ensure compliance with corporate security policies and standards 
• Interact with senior leadership to support cross-functional security and compliance initiatives, including providing subject matter expertise over security processes for new and ongoing customer and regulatory requirements 
• Establish and deliver meaningful and actionable compliance metrics and reporting 
• Work with the Automated Compliance Platform (ACP) team to identify new requirements which need to be automated in ACP. 
• Leverage automated evidence collection where applicable,
• Evidence Collection automation in ACP for automatable controls and audit requests 
• Develop strong relationships with the business/functional units to understand any interdependency and ensure demonstrable compliance 
• Monitor changes to the regulatory frameworks and landscape and recommend policy changes that will help the business be proactive in maintaining compliance 
• Create dashboard and define metrics to demonstrate Intuit’s compliance posture to senior leaders

Intuit provides a competitive compensation package with a strong pay for performance rewards approach. The expected base pay range for this position is NY $134,194 - $181,556, CA $157,910 - $213,644. This position will be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit®: Careers | Benefits). Pay offered is based on factors such as job-related knowledge, skills, experience, and work location. To drive ongoing pay equity for employees, Intuit conducts regular comparisons across categories of ethnicity and gender.

Award-winning culture, best-in-class benefits