Planned Parenthood Federation of America - Associate Director, Regulatory Risk, Compliance & Accreditation

• Identifies areas of continuous improvement in the evaluation process and criteria, and • adjusts to the evolution of Accreditation operations and requirements • Ensures timely communications and project management of individual Accreditation reviews • and PCI DSS compliance activities • Maintains thorough and organized tracking of Accreditation and PCI DSS requirements, • assessment results, and corrective actions • Support and educate affiliates and ancillary organizations on required PCI DSS compliance • Review and update internal PCI DSS training content, policies, and procedures, as • necessary, for national office staff. • Execute annual PCI DSS self-assessment questionnaires for all payment flows to identify • security and technical deficiencies and collaborate across teams to remediate appropriately. • Finalize and obtain signature for annual PCI DSS AOC. • Facilite required vulnerability scanning of relevant cardholder data environments (CDEs), • which includes running a quarterly scan, identifying security and technical deficiencies, • ensuring appropriate scope, and following up for remediations or documenting exceptions. • Obtain and manage external PCI DSS vendors’ AOCs • Support the PPFA TPRM team, as needed • Communicates professionally and effectively with technical, non-technical, and executive stakeholders • Bachelor’s degree and 5+ years of industry experience is required • Experience with compliance requirements and industry standards (HIPAA Security, PCI DSS, • Current industry certifications, particularly security and/or auditing certifications, a plus • (CISA, CRISC, GSEC, etc.) • Understanding of Information Security, Risk and Compliance • Minimum of 2 years of experience in governance, risk, and compliance (GRC), assessing, • auditing, accreditation, and evaluating or implementing IT and information security controls, • including experience reviewing information security systems, policies, processes, technology • environments, internal control frameworks, compliance requirements, and audit programs. • A deep understanding of IT and information security environments and administration • Strong written and verbal communication, including technical and non-technical writing skills • Strong attention to detail and analytical skills • Ability to balance firm adherence to security practices and flexibility in a fast-paced and • continuously changing environment • Ability to maintain neutrality and fairness in the review process, and avoid or raise any • Knowledge of security technologies (security tools, networking, device protections, • encryption, data protection, identity and access management, etc.) • Commitment and track record of advancing racial equity in both operations and • communications. • High proficiency in Google products • Flexibility and ability to adapt to quickly changing priorities and ambiguous situations • $125,000 - $130,000 a year • Travel: 0-10%, domestic travel, as needed • Planned Parenthood's cultural ethos, "In This Together", reflects our commitment to building a • workplace culture that fosters belonging, promotes learning throughout the employee lifecycle, and • recognizes individual contributions to our mission. • Planned Parenthood Federation of America participates in the E-Verify program. Planned • Parenthood Federation of America is an equal employment opportunity employer and is committed • to maintaining a non-discriminatory work environment, and does not discriminate against any • employee or applicant for employment on the basis of race, color, religion, sex, national origin, age, • disability, veteran status, marital status, sexual orientation, gender identity, or any other • characteristic protected by applicable law. Planned Parenthood is committed to creating a dynamic • work environment that values diversity and inclusion, respect and integrity, customer focus, and