Job Description Program Manager, IT Hosting Audit and Compliance-20001813

Job  Consulting Primary Location US-NC-Cary Organization  SAS Institute Inc. Job Posting  Jan 13, 2014, 9:09:37 PM Unposting Date  Jan 17, 2014, 7:59:00 AM * Classification Full-time   Description     As an Audit & Compliance Specialist you will help ensure that staff working on SAS Solutions OnDemand projects operate within the policies and procedures set forth by SAS Solutions OnDemand as well as company, state, federal, and international laws. A focus will be made on security and hosting operations-related activities.   Your responsibilities will include: Assist with internal inspections and benchmarking of security and/or quality policies against best practices and standards, which may include ISO 27001, PCI DSS, FDA Part 11, ITAR, IRS 1075, and NIST 800-53. Help maintain the quality management System, including policy and process development and updates, while ensuring compliance with regulatory regulations and guidances. Research and recommend changes to enhance or streamline information security procedures, including security testing risk assessment, security incident management, and auditing. Effectively communicate, facilitate, present, and train both technical and non-technical (large) audiences, regarding security or validation requirements and procedures. Coordinate response to reported security violations and issues. Complete compliance, quality/validation, and security areas for RFP and security questionnaires. Review hosting, security, and audit contract terms, and ensure compliance to current policies. Interface with customer auditors to discuss security or IT hosting operations-related concerns during pre and post sales activities. Help coordinate customer audit activities, including coordination with other SAS divisions. Analyze projects and participate in definition of validation strategies, ensuring compliance to regulatory requirements, including FDA CFR 21 Part 11, as applicable. Document and manage audit findings, responses, and remediation activities resulting from customer, supplier, and internal audits. Assist with analysis, documentation, and training of remediation actions in response to audit findings. Focus is on pharmaceutical, banking and insurance industry requirements. Coordinate and assist with Continuity of Business/Business Resumption activities, including BR Plan maintenance, testing, and/or Business Impact Analysis (BIA). Assist with ongoing management of SAS Solutions OnDemand’s partners and third-party suppliers, including onsite audit planning, execution, and reporting, as appropriate. Manage third-party software licensing compliance and reporting; assist with licensing discussions with other SAS divisions, including legal, client support software and finance. Must have the ability to work with little supervision, escalating issues, as appropriate. Perform other duties, as assigned. Qualifications   Essential Bachelor's degree in Business, Computer Science or related field At least 5 years of experience in project management, management consulting, IT, or audit/compliance. 1or more years of experience in a regulated (pharmaceutical, banking, insurance) industry Additional Understanding of best practices for information security and data privacy Understanding of regulatory standards: PCI, NIST 800-53, or IRS 1075 Knowledge and experience with best practices /standards: ITIL, GAMP5, or ISO 27001 Knowledge of IT or quality auditor procedures and tools (not financial/accounting) Preferences Auditor certification, such as CISA or CQA, or equivalent professional training SAS software implementation experience or prior implementation experience IT hosting experience Travel as business requirements dictate at management discretion Additional Information   To qualify, applicants must be legally authorized to work in the United States, and should not require, now or in the future, sponsorship for employment visa status.   The level of this position will be determined based on the applicant's education, skills and experience.   Resumes may be considered in the order they are received.   SAS is an Equal Opportunity/Affirmative Action Employer M/F/D/V   SAS employees performing certain job functions may require access to technology or software subject to export or import regulations. To comply with these regulations, SAS may obtain nationality or citizenship information from applicants for employment. SAS collects this information solely for trade law compliance purposes and does not use it to discriminate unfairly in the hiring process.

 For more details