Director, Technology Compliance

This role is responsible for contributing to the Hertz Compliance program by providing management of compliance services in the areas of technology and risk; covering areas such as General Data Protection Regulation, (GDPR) California Consumer Privacy Act, (CCPA) Payment Card Industry, (PCI) Sarbanes-Oxley, (SOX) and other regulatory requirements. The individual is responsible for operating across all areas of Hertz globally to provide security enhancements.

The successful candidate actively identifies and communicates control gaps as needed and helps to contribute to ongoing controls development and improvement.

This role has an impact on the compliance activities to the company on a global scale.

COMPLIANCE FUNCTIONS

• Advises leadership, functional areas, and lines of business of emerging compliance issues and consults on the establishment of controls to mitigate risks.
• Partners with IT to help automate processes in governance, risk, and compliance platform; provides GRC record updates.
• Develops, initiates, maintains, and revises relevant policies and procedures.
• Identifies potential areas of compliance vulnerability and risk; develops/recommends corrective action plans for resolution of issues.
• Provides audit information to management by researching and analyzing internal and external data, preparing reports.
• Monitors and coordinates IT compliance activities for awareness of the status to these activities on an ongoing basis, taking appropriate steps to improve the effectiveness.
• Supports departments by collecting and coordinating internal compliance data with auditors (internal and external) and various departments.
• Assists with ensuring User Access Reviews are in place and completed regularly.
• As an active participant in all testing activities, regularly reports status to proactively identify potential challenges.
• Co-creates and provides action plans with remediation dates; tracks and assists with remediation plans.
• Participates in a variety of annual risk assessments.
• Performs SOC-1 SOC-2 Annual scoping, testing, and quarterly control evidence reviews.
• Working closely with the Technology Group, helps organize disparate data/activities, consolidates information, and provides answers to regulatory questionnaires, i.e., PCI-DSS, GDPR, CCPA, etc.
• Participates in privacy initiatives and partners closely with Hertz Legal Team.
• Facilitates compliance walk-throughs for each in scope system/application.
• Provides support to projects by consulting on compliance impacts to the projects.
• Defines, gathers and reports on metrics regarding all IT compliance initiatives within the global Hertz environments.

MANAGEMENT

• Manages the compliance team to ensure tasks are appropriately assigned, tracked, and completed.
• Represents the team during interactions with Internal and External Audit partners.
• Provides metrics on the operational effectiveness of the Hertz IT Compliance program.
• Provides direction and support to the Hertz Compliance Specialists.

COMMUNICATION

• Expert communicative skills explain regulatory requirements and identifies risks in a succinct, easy-to-understand manner.
• Educates Hertz employees/teams and drives sponsorship for the compliance program objectives.

TEAMWORK

• Works closely with IT, Business Operations and other functional area specialists to accomplish corporate and compliance goals.
• Develops and maintains strong partnerships with Internal Audit, Accounting, and external auditing firms.

Experience and Qualifications

• • Bachelor's Degree in Computer Science, Accounting, or relevant work experience. Required.
  • Security and/or audit certifications (CISA, CISM, CISSP, etc.). Desired.
  • 5 years of compliance experience, preferably in a global corporation.
  • Expert knowledge of common regulatory, audit and compliance requirements (SOX, PCI, CCPA, GDPR, etc.).
  • Technical writing experience, policy, reports (grade is dependent on experience).
  • In-depth knowledge of information risk concepts and principles.
  • Knowledge of privacy and related initiatives.
  • Experience with common information security management frameworks, such as International Organization for Standardization (ISO) 2700x and the ITIL, COBIT, and National Institute of Standards and Technology (NIST) frameworks, CIS.
  • Experience with enterprise governance, risk, and compliance platforms, as well as a wide range of automated compliance tools.
  • Experience in developing, documenting and maintaining policies, processes, procedures and standards.
  • Audit, compliance or governance experience.

At Hertz, we champion and celebrate a culture of diversity and inclusion. We take affirmative steps to promote employment and advancement opportunities. The endless variety of perspectives, experiences, skills and talents that our employees invest in their work every day represent a significant part of our culture - and our success and reputation as a company.

Individuals are encouraged to apply for positions because of the characteristics that make them unique.

EOE, including disability/veteran