IT Compliance Specialist

IT Compliance Specialist

The candidate will help define, review and assess the control environment in the organization’s IT systems, controls, and processes to ensure they are effective, efficient, and compliant with relevant regulations and industry best practices. The candidate is also responsible for collaborating with management on the development and implementation of action plans to eliminate control weaknesses identified. The role also includes assisting the IT team with hands-on implementation of agreed upon controls where needed, including assisting with configuration of systems and networks under the guidance of IT management. The individual must be able to work independently in a fast-paced environment. This role offers the opportunity to take on broader roles within Standex.

What You'll Do

• Compliance Monitoring: Continuously monitor IT systems and processes to ensure compliance with relevant regulations and standards (e.g., GDPR, , SOX, NIST 800-53, NIST 800-171).
• Collaborate with the broader IT community to develop and IT compliance program to periodically assess compliance risks and gaps in regard to IT systems, applications, and processes. Where needed, assist the IT team in implementing agreed upon controls, policies and procedures.
• Conduct regular audits to validate compliance with Standex’ IT policies, procedures and standards and to proactively identify risks.
• Policy Development: Develop and maintain IT compliance policies, procedures, and guidelines.
• Provide training and awareness programs to employees on IT compliance requirements and best practices.
• Prepare and present compliance reports to senior management and regulatory bodies.
• Work closely with IT, legal, and business teams to ensure alignment and integration of compliance activities.
• Develop and implement enterprise-wide processes to monitor compliance with policies, procedures and standards, such as policy exception approval, tracking and renewal.
• Support the annual risk assessment process and preparation of annual IT compliance plan.
• Lead IT compliance engagements and projects to ensure timely completion of the compliance plan.
• Coordinate the execution of internal and external audits with all stakeholders. Assist with external audit support requests.
• Support Standex’s operational initiatives by ensuring key risk areas are identified and provide inputs to senior management for opportunities for improvements and collaborate with management to improve Company Policies and Procedures.
• Support execution of the enterprise risk management program and ESG audits.
• Perform additional duties and other projects as assigned.

What You'll Bring

• Bachelor’s degree and/or master’s in information technology, auditing or business management.
• Certification such as CISA, CISM, CISSP, or in the process of being obtained (or willing to obtain).
• Some administrative systems experience, such as Active Directory, M365, Windows Server or networking.
• Minimum 3-5 years of experience in IT compliance, including corporate processes, IT, and/or Sarbanes-Oxley.
• Exposure to multinational environment and/or manufacturing experience.
• Working knowledge of an IT control framework such as NIST 800-53, ISO 27001 or similar.
• Willing/able to travel 20% internationally

What We Value

• Proficient with MS Office
• Excellent communication and interpersonal skills, including effective interviewing skills.
• Accuracy and attention to detail with the ability to recognize problems and recommend solutions.