IT Compliance Manager

Shockwave Medical, Inc. is a pioneer in the development and commercialization of Intravascular Lithotripsy (IVL) to treat complex calcified cardiovascular disease. Shockwave Medical aims to establish a new standard of care for medical device treatment of atherosclerotic cardiovascular disease through its differentiated and proprietary local delivery of sonic pressure waves for the treatment of calcified plaque.

Position: IT Compliance Manager

The IT Compliance Manager ensures that the organization's IT systems and operations comply with regulatory requirements, industry standards, and internal policies. This role is responsible for managing compliance programs, performing audits, and mitigating risks related to IT operations. The IT Compliance Manager will work closely with various teams across the organization to implement best practices for security and compliance.

Essential Job Functions

Compliance Management:

1. Develop, implement, and manage IT compliance policies, procedures, and practices.
2. Ensure compliance with all applicable regulations (e.g., GDPR, HIPAA, SOX, PCI-DSS, etc.) and industry standards.
3. Lead and manage compliance audits (internal and external) and assessments to ensure adherence to regulations.
4. Coordinate with legal and risk management teams to stay updated on compliance requirements.
5. Serve as a liaison with regulatory agencies and auditors.

Risk Management & Assessment:

1. Identify, assess, and manage IT risks associated with compliance requirements.
2. Develop risk mitigation strategies and action plans.
3. Monitor and report on the status of compliance risks and controls.

Policy and Procedure Development:

1. Create and maintain documentation for IT compliance policies and procedures.
2. Review and update IT security policies regularly to reflect changes in regulatory requirements and business processes.
3. Ensure employees are educated on compliance requirements through training programs and awareness initiatives.

Audit and Monitoring:

1. Conduct regular compliance audits, including penetration testing, system reviews, and vulnerability assessments.
2. Monitor and track compliance status across IT systems and infrastructure.
3. Address compliance gaps and implement corrective actions where necessary.

Collaboration:

1. Work with cross-functional teams (IT, legal, HR, finance) to integrate compliance processes into business operations.
2. Provide guidance to IT and other business units on compliance-related matters.
3. Collaborate with external auditors and regulatory bodies as needed.

Incident Management:

1. Respond to and investigate compliance-related incidents or breaches.
2. Document and report incidents to appropriate regulatory bodies when necessary.

Continuous Improvement:

1. Stay informed of evolving regulatory and industry compliance standards.
2. Recommend and implement enhancements to compliance programs based on regulatory changes and emerging risks.

Requirements

1. Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
2. Compliance certifications such as CISA, CISM, CRISC, or CISSP are preferred.
3. 10 years of experience in IT compliance, risk management, or cybersecurity roles.
4. Strong knowledge of regulatory frameworks such as GDPR, HIPAA, SOX, PCI-DSS, etc.
5. Experience conducting audits and managing compliance initiatives in a corporate setting.
6. Strong understanding of IT systems, cybersecurity principles, and risk management practices.
7. Excellent communication and interpersonal skills for collaborating with stakeholders at all levels.
8. Strong project management skills and ability to prioritize tasks.
9. Analytical mindset and problem-solving skills to assess risks and compliance issues.
10. Ability to stay updated with changing laws and regulations related to IT compliance.
11. Experience in a highly regulated industry (e.g., healthcare, finance) preferred.
12. Experience with GRC (Governance, Risk, and Compliance) tools and frameworks preferred.
13. Detail-oriented and organized.
14. Strong leadership and decision-making abilities.
15. Ability to work under pressure and handle multiple tasks efficiently.
16. Proactive in identifying compliance risks and addressing them.

Market Range: 136,000-170,000

Exact compensation may vary based on skills, experience, and location.

Benefits

Shockwave Medical offers a competitive total compensation package as well as the following benefits and perks:

Core Benefits: Medical, Dental, Vision, Pre-tax and Roth 401k options with a fully vested match, Short-Term and Long-Term Disability, and Life Insurance, Employer contribution toward Health Savings Account (HSA), Competitive PTO balance.

Perks: Calm App, Pet Insurance, Student Loan Refinancing, Spot Bonus awards.

EEO Employer