Manager -WBA Technology, Risk and Compliance

at  Walgreens

JOB SUMMARY:

Responsibility for segments of the Company’s WBA IT Governance, Risk & Compliance (ITGRC) Programs, including: security governance, risk management, and compliance program for WBA group. Global coordination and oversight of divisional teams that execute the WBA IT Governance, Risk &
Compliance programs within the division according to the global security and risk management framework and program. Facilitation of risk, control and security policy assessments. Global analytics of the ITGRC program and creation and distribution of reporting / dashboarding. Maintenance of the global scope of IT assets, controls, control owners, risks, etc. that make up the ITGRC program. Remediation and risk mitigation planning, execution and oversight. Creation and maintenance of governance processes to oversee ITGRC programs.

Job Responsibilities:

• Responsibility for segments of the Company’s WBA IT Governance, Risk & Compliance (ITGRC) Programs, including: IT governance, IT risk management, and IT compliance program for WBA group.
• Global coordination and oversight of divisional teams that execute the WBA IT Governance, Risk & Compliance programs within the division according to the global security and risk management framework and program.
• Facilitation of risk, control and security policy assessments
• Global analytics of the ITGRC program and creation and distribution of reporting / dashboarding.
• Maintenance of the global scope of IT assets, controls, control owners, risks, etc. that make up the ITGRC program.
• Remediation and risk mitigation planning, execution and oversight.
• Creation and maintenance of governance processes to oversee ITGRC programs.
• Identifies developmental needs of members assigned to project teams and develops suggestions to address those needs. Acts as mentors to team members on projects and provides on the job training.
• Schedules work, assigns responsibility, and delegates authority for assigned projects.

BASIC QUALIFICATIONS

• Bachelor’s Degree in Accounting, Finance, MIS or Computer Science and at least 2 years of experience in IT, IT Audit, IT Compliance, and/or Information Security OR High School Diploma/GED and at least 5 years of experience in IT, IT Audit, IT Compliance and/or Information Security.
• Experience applying IT and audit principles and ISACA or IIA Standards for the Professional Practice of Internal Auditing or relevant IT compliance program experience.
• Experience developing and managing IT security, IT risk, and IT compliance programs and teams.
• Experience with project management (for example: planning, organizing, and managing resources to bring about the successful completion of specific project goals and objectives).
• Experience presenting to and coordinating senior level meetings, including preparation of agendas, documenting meeting minutes, sending out documents to attendees.
• Knowledge of PCI, SOX, and/or HIPAA.
• At least 1 year of direct leadership, indirect leadership and/or cross-functional team leadership.
• Willing to travel up to 25% of the time for business purposes (domestically and internationally).

PREFERRED QUALIFICATIONS

• Bachelor’s Degree in Accounting, Finance, MIS or Computer Science
• Master’s Degree.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP).
• Audit or Compliance experience in the Retail, Pharmaceutical, Healthcare or distribution industry.

• Responsibility for segments of the Company’s WBA IT Governance, Risk & Compliance (ITGRC) Programs, including: IT governance, IT risk management, and IT compliance program for WBA group.
• Global coordination and oversight of divisional teams that execute the WBA IT Governance, Risk & Compliance programs within the division according to the global security and risk management framework and program.
• Facilitation of risk, control and security policy assessments
• Global analytics of the ITGRC program and creation and distribution of reporting / dashboarding.
• Maintenance of the global scope of IT assets, controls, control owners, risks, etc. that make up the ITGRC program.
• Remediation and risk mitigation planning, execution and oversight.
• Creation and maintenance of governance processes to oversee ITGRC programs.
• Identifies developmental needs of members assigned to project teams and develops suggestions to address those needs. Acts as mentors to team members on projects and provides on the job training.
• Schedules work, assigns responsibility, and delegates authority for assigned projects