Sr. Manager, IT Compliance

Curaleaf Culture: 

At Curaleaf, we have a passionate commitment in everything we do. From innovative products to promoting social justice, from environmental sustainability to building world-class brands, we know that none of this is possible without our Team Members, which is why we’ve committed to fostering a diverse and inclusive experience for all.

What You’ll Do:

The Sr Manager, IT Compliance is responsible for leading the effort to interpret compliance regulations such as SOX, HIPPA, GDPR, CCPA and CPRA into actionable IT Controls, with corresponding processes, policies oversight.  This position will manage the SOX ITGC controls and work with the internal and external auditors and process owners to organize the audits, controls, testing and manage findings and gap remediations.  This position is responsible for creating and updating the related policies and SOPs.

• Interprets and develops controls, policies and SOPs to support compliance with various regulatory requirements including, HIPPA, SOX, CCPA and GDPR.
• Provide guidance on applications, both internally developed and purchased to ensure they meet compliance controls
• Develop and perform training on compliance controls
• Monitors, researches, analyzes, and interprets federal and state regulations to determine applicability and risks to IT operations.
• Gather and review SOC II reports
• Regularly audit and assess efficiency of controls and recommend effective improvements
• Conducts security audits to ensure that Curaleaf information resources follow company policies and guidelines, and local, state, and federal regulations.
• Works with internal and external audit, business process and IT owners on policies, processes and support of controls.
• Represent IT with the internal and external auditors for the SOX audits.

What You’ll Bring:

• Minimum of 5 years working experience in Information Technology or Information Security field
• Security Certification highly desirable (Security+, ITIL, GCLD, CIPM, or any one Microsoft Cloud Security)
• Good working knowledge of Information Security frameworks (NIST 800-53, COBIT, CIS, HITRUST Etc.)
• Good working knowledge of regulatory compliance frameworks (HIPPA, SOX, CCPA, etc.)
• Solid working knowledge of Microsoft Azure security tools
• Experience with configuring privacy and compliance software
• Experience in a cloud only environment, preferably Azure Cloud
• Solid working knowledge of internal and external audit practices
• Excellent verbal, written, and interpersonal communication skills, including explaining technical concepts in non-technical terms.
• Effectively using organizational and planning skills with attention to detail and follow-through.
• Tracking, troubleshooting, and resolving user problems.
• Efficiently meeting deadlines, schedules, and target dates.
• Maintaining confidentiality of work-related information and materials.
• Establishing and maintaining effective working relationships.
• Experience in multiple Information Security disciplines/domains, a plus

What We Offer:

• Competitive Pay
• Medical, Dental, Vision Benefits
• Healthcare and Dependent Care Flexible Spending Account (FSA)
• Health Savings Account (HSA)
• Retirement Plan - 401(K)
• Life/AD&D Insurance
• Short- and Long-Term Disability
• Paid Parental Leave
• Community Involvement Through our Rooted in Good Initiative
• Employee Resource Groups
• Employee Referral Payment Program
• Paid Time Off (PTO)
• Employee Assistance Program
• Commuter Benefits
• Employee Product Discounts

Curaleaf Awards and Achievements:

2023 Ragan’s Top Places to Work

2022 TIME100 Most Influential Companies

2020 Cannabis Doing Good’s Good Neighbor Award

2020 Minorities for Medical Marijuana’s Diversity & Inclusion Award

Follow us on Social Media 

Instagram: @curaleaf.usa

Twitter: @Curaleaf_Inc