Principal Regulatory Compliance Specialist

Job Description

Come join the fastest growing Cloud organization with world-class engineering and laser focus on excellence.

Oracle's extensive enterprise customer base is looking for rock-solid cloud solutions that provide the same reliability and effectiveness that they have come to expect from Oracle. Oracle Cloud Infrastructure (OCI) provides highly cost effective and high performance IaaS & PaaS Cloud solutions to its customer and they come to expect industry-leading security and compliance programs, creating a stable and highly-effective foundation for their workloads and an infrastructure that meets their security and compliance needs.

We are looking for a Regulatory Compliance Principal Specialist who is looking to grow their career in Cloud. You will be responsible for the support and implementation of scalable audit programs to support Oracle Cloud Infrastructure's growth in regulated markets within the US and internationally.

In this role you will create and coordinating documentation, tools, and processes for pre-audit readiness, audit testing, monitoring, and remediation activities. Start with supporting audits and grow to lead them.

Career Level - IC4

Responsibilities

Functions include:

• Plan, manage, lead, and execute multiple audit programs within OCI with third-party auditors, specifically PCI assessments which include a review of control design with a focus on payment card compliance and security (PCI-DSS)

• Drive project scheduling, tracking, and communications up to the Director level independently

• Review audit evidence from the businesses within OCI and analyze for auditor consumption

• Communicate within the team autonomously and drive communication across partner teams

• Collaborate with subject matter experts to refine operating processes to increase the value and scale of our audit programs and decrease the operational impact to OCI

• Evaluate the effectiveness of controls and corresponding evidence in alignment with PCI DSS framework requirements

• Conduct interactions with third party auditors (QSA) that exhibit control understanding and confidence

• Effectively communicate audit engagement status to executive leadership

• Ability to communicate in remote working environments over video, phone, email, and other tools

• Provide clear expectations and direction to security and engineering teams within OCI on audit requirements and drive compliance gap remediation efforts

• Provide high quality, professional day-to-day execution of audit engagements

• Build, manage, and enhance the efficiency of audit programs as the business scales

The ideal candidate will have the following skills:

• 8+ years audit program management experience with either a "Big 4" accounting firm, or a mid-level accounting firm.

• 4+ years of above experience in the IT or Cloud industry is preferred

• Knowledge of industry and regulatory frameworks is preferable, such as, SOC 1 & SOC 2, HIPAA, PCI, ISO Series, C5, CSA STAR, and HITRUST

• Proven experience in security, risk, and compliance, specifically PCI DSS.

• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls, specifically for PCI-compliant products

• Practical cloud native experience with strong understanding of cloud computing architecture

• Demonstrates ability to identify problem areas in a program and build projects to correct, enhance, reduce the impact of those issues

• Proven ability to combine business acumen, technical acumen and process expertise to define client (internal/external) engagement and program execution

• Proven ability to influence & gain buy-in at multiple levels, across divisions, functions and cultures; comfort working with executive level management

• Demonstrated ability to achieve results through cross-functional, virtual teams

• Possess ability to explain complex auditing topics to audiences with no auditing experience

• Ability to prioritize, manage, and deliver on multiple projects simultaneously and partner with management in support of key initiatives and projects

• Strong bias toward action, flexible, resourceful, and able to operate effectively within a dynamic, fast-paced environment

• Superior communication skills (interpersonal, verbal, presentation written, email, tickets, etc.)

• JIRA and Confluence experience strongly preferred

• Display a demonstrated ability to think broadly and strategically

• Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills

• Team leadership expertise

• Attention to detail, proven analytical and problem-solving skills

• Bachelor's degree or equivalent experience

• PMP, PgMP, CISA, CISM, CISSP, CIPP, desired

• PCI Professional Certification, PCI Security Standards Council Certifications, Qualified Security Assessor (QSA) preferred

Disclaimer

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range in USD from: $87,000 to $178,100 per annum. May be eligible for bonus and equity.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.

Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following

1. Medical, dental, and vision insurance, including expert medical opinion

2. Short term disability and long term disability

3. Life insurance and AD&D

4. Supplemental life insurance (Employee/Spouse/Child)

5. Health care and dependent care Flexible Spending Accounts

6. Pre-tax commuter and parking benefits

7. 401(k) Savings and Investment Plan with company match

8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.

9. 11 paid holidays

10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.

11. Paid parental leave

12. Adoption assistance

13. Employee Stock Purchase Plan

14. Financial planning and group legal

15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

About Us

As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's problems. True innovation starts with diverse perspectives and various abilities and backgrounds.

When everyone's voice is heard, we're inspired to go beyond what's been done before. It's why we're committed to expanding our inclusive workforce that promotes diverse insights and perspectives.

We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity.

Oracle careers open the door to global opportunities where work-life balance flourishes. We offer a highly competitive suite of employee benefits designed on the principles of parity and consistency. We put our people first with flexible medical, life insurance and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by calling +~~~, option one.

Disclaimer:

Oracle is an Equal Employment Opportunity Employer*. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

*** Which includes being a United States Affirmative Action Employer**