Associate Director, Regulatory Risk, Compliance & Accreditation at Ppfa

Planned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care for all people, as well as the nation’s largest provider of sex education. We serve everyone with compassion, respect, and without judgment, striving to create equitable access to health care. Through our health centers, community programs, and online resources, we act as a trusted source of information that empowers people to make informed health decisions. Our cultural ethos, In This Together, reflects our deep commitment to building a workplace that fosters belonging and recognizes the unique contributions of every team member.

About the Role

We are looking for a dynamic and effective Associate Director, Regulatory Risk, Compliance & Accreditation to join our team. This is a full-time, remote position reporting to the Director of Information Security, Risk & Compliance. In this role, you will serve as an expert for our Accreditation and Certification program, helping to safeguard the data entrusted to us by our patients, supporters, donors, and staff.

Key Responsibilities

• Lead the assessment and management of risks across our federation by conducting routine evaluations of affiliate and ancillary organizations.
• Oversee PCI DSS compliance activities, ensuring that internal controls meet all necessary regulatory, operational, and security standards.
• Conduct technical analyses, interviews, and risk assessments aligned with cybersecurity frameworks like NIST CSF and HIPAA Security to identify and remediate areas of non-compliance.

Requirements

To be successful in this role, you should possess the following qualifications:

• A Bachelor’s degree and at least 5 years of relevant industry experience.
• A minimum of 2 years of experience in Governance, Risk, and Compliance (GRC), including auditing, accreditation, and the evaluation of IT and information security controls.
• Strong knowledge of compliance standards such as PCI DSS, HIPAA, and NIST.
• High proficiency in Google Workspace and excellent technical writing skills.
• A demonstrated commitment to advancing racial equity in both communications and operations.
• Professional certifications, such as CISA, CRISC, or GSEC, are considered a significant plus.

Location

This position is remote and can be performed from anywhere in the United States, with minimal domestic travel required (0-10%).

Compensation and Benefits

We are proud to offer a supportive work environment that values innovation, integrity, and diversity. Employees in this role benefit from our commitment to remote work, allowing for flexibility in a fast-paced and mission-driven organization.