IT Governance and Compliance Manager

AHCCCS

Arizona Health Care Cost Containment System
Accountability, Community, Innovation, Leadership, Passion, Quality, Respect, Courage, Teamwork

The Arizona Health Care Cost Containment System (AHCCCS), Arizona’s Medicaid agency, is driven by its mission to deliver comprehensive, cost-effective health care to Arizonans in need. AHCCCS is a nationally acclaimed model among Medicaid programs and a recipient of multiple awards for excellence in workplace effectiveness and flexibility.

AHCCCS employees are passionate about their work, committed to high performance, and dedicated to serving the citizens of Arizona. Among government agencies, AHCCCS is recognized for high employee engagement and satisfaction, supportive leadership, and flexible work environments, including remote work opportunities. With career paths for seasoned professionals in a variety of fields, entry-level positions, and internship opportunities, AHCCCS offers meaningful career opportunities in a competitive industry.

Come join our dynamic and dedicated team.

IT Governance and Compliance Manager

Information Services Division (ISD)

Job Location:

Address:  801 E. Jefferson Street, Phoenix, AZ 85034

Posting Details:

Must reside in the state of Arizona.

Salary:  $85,000 - $95,000

Grade: 28

Closing Date: Open Until Filled

This position is eligible for full-time remote work (including virtual office arrangement in Arizona).

Job Summary:

A career in public service awaits you. COME JOIN OUR TEAM!

A great benefit of working for the State of Arizona is a fantastic work/life balance. State employees enjoy challenging work, popular remote work options, comprehensive health and wellness benefits, and career growth opportunities.

What You'll Do To Contribute to Agency Success :

The IT Governance and Compliance Manager is responsible for leading the IT governance, compliance, and risk management programs for the agency. This position oversees the development and implementation of the IT governance framework, ensures regulatory compliance, and coordinates with IT leadership on IT risk management processes. The IT Governance and Compliance Manager reports to the IT Operations Officer and plays a critical role in aligning IT practices with agency goals and regulatory requirements.

Major duties and responsibilities include but are not limited to:
• Leadership and Program Oversight: Provide strategic oversight and leadership for IT governance, compliance, and risk management programs. Foster a collaborative and accountable culture, ensuring that governance and compliance initiatives are implemented and continuously improved.
• IT Governance and Policy Management: Maintain IT governance frameworks, policies, procedures, and processes to ensure alignment with agency goals and regulatory requirements. Regularly review and update policies to reflect evolving compliance requirements, risks, and industry standards. Ensure that governance processes are documented and communicated appropriately.
• IT Compliance Oversight: Oversee the IT compliance team to ensure adherence to applicable laws and regulations. Monitor compliance with both internal and external requirements. Coordinate and manage external IT audits conducted by regulators, ensuring timely responses to requests and accurate documentation of findings. Work with agency teams to address audit recommendations and enhance compliance processes.
• IT Risk Management Coordination: Collaborate with IT leadership to ensure risks are identified, assessed, documented and mitigated following IT risk management policies. Support efforts to automate risk management practices. Provide regular reporting on IT risks and mitigation efforts. Ensure third-party partners remain compliant with privacy and security requirements.
• Stakeholder Collaboration and Communication: Act as the primary point of contact for IT governance, risk and compliance matters, building strong relationships with internal and external stakeholders, including Federal and State regulators. Communicate effectively to technical and non-technical audiences. Provide training and education to ensure understanding of compliance requirements.
• Continuous Improvement: Develop and monitor key metrics to assess the effectiveness of IT governance, risk and compliance efforts. Identify opportunities for improvement and implement strategies to address gaps. Stay current on industry trends and regulatory changes to ensure efforts remain effective and aligned with agency goals.

Knowledge, Skills & Abilities (KSAs):

Knowledge:
• IT governance frameworks and risk management methodologies, including COBIT, ITIL, and NIST.
• Common security and privacy regulatory requirements and standards (e.g., PCI DSS, NIST 800-53, ISO2700x, etc.)
• Information security risk management frameworks and compliance practices
• Third-party risk management practices
• Laws and regulations affecting health care entities in the following areas:
• Protected Health Information (PHI)
• Health Insurance Portability and Accountability Act (HIPAA)
• CMS
• Research Compliance
• State Regulations

Skills:
• Strong leadership and program management skills, including leading cross- functional initiatives
• Strong customer service skills
• Excellent interpersonal, written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders
• Excellent presentation skills, including formal report writing
• Advanced problem-solving and analytical skills

Abilities:
• Work effectively with diverse teams and stakeholders across the agency
• Interpret complex regulatory requirements and translating them into actionable policies and procedures
• Develop policies and processes based on regulatory requirements and industry standards
• Balance, prioritize and organize multiple tasks
• Synthesize feedback and adjust plans accordingly
• Operate with no supervision in a complex environment
• Apply creative solutions to business problems to ensure business needs are most effectively met
• Effectively articulate the relationship of the department to other business units in the organization
• Effectively manage teams in a remote environment
• Integrate new concepts, practices, and emerging technologies into strategic planning process

Qualifications:

Minimum:
• Bachelor’s degree plus 5 or more years of related experience in related discipline (or equivalent experience).

Pre-Employment Requirements:

• Successfully complete the Electronic Employment Eligibility Verification Program (E-Verify), applicable to all newly hired State employees.
• Successfully pass fingerprint background check, prior employment verifications and reference checks; employment is contingent upon completion of the above-mentioned process and the agency’s ability to reasonably accommodate any restrictions.
• Travel may be required for State business. Employees who drive on state business must complete any required driver training (see Arizona Administrative Code R2-10-207.12.) AND have an acceptable driving record for the last 39 months including no DUI, suspension or revocations and less than 8 points on your license. If an Out of State Driver License was held within the last 39 months, a copy of your MVR (Motor Vehicle Record) is required prior to driving for State Business. Employees may be required to use their own transportation as well as maintaining valid motor vehicle insurance and current Arizona vehicle registration; however, mileage will be reimbursed.

If this position requires driving or the use of a vehicle as an essential function of the job to conduct State business, then the following requirements apply: Driver’s License Requirements.

All newly hired State employees are subject to and must successfully complete the Electronic Employment Eligibility Verification Program (E-Verify).

Benefits:

Among the many benefits of a career with the State of Arizona, there are:
• 10 paid holidays per year
• Paid Vacation and Sick time off (13 and 12 days per year respectively) - start earning it your 1st day (prorated for part-time employees)
• Paid Parental Leave-Up to 12 weeks per year paid leave for newborn or newly-placed foster/adopted child (pilot program).
• Other Leaves - Bereavement, civic duty, and military.
• A top-ranked retirement program with lifetime pension benefits
• A robust and affordable insurance plan, including medical, dental, life, and disability insurance
• Participation eligibility in the Public Service Loan Forgiveness Program (must meet qualifications)
• RideShare and Public Transit Subsidy
• A variety of learning and career development opportunities

By providing the option of a full-time or part-time remote work schedule, employees enjoy improved work/life balance, report higher job satisfaction, and are more productive. Remote work is a management option and not an employee entitlement or right. An agency may terminate a remote work agreement at its discretion.

Learn more about the Paid Parental Leave pilot program here. For a complete list of benefits provided by The State of Arizona, please visit our benefits page

Retirement:

Lifetime Pension Benefit Program
• Administered through the Arizona State Retirement System (ASRS)
• Defined benefit plan that provides for life-long income upon retirement.
• Required participation for Long-Term Disability (LTD) and ASRS Retirement plan.
• Pre-taxed payroll contributions begin after a 27-week waiting period (prior contributions may waive the waiting period).

Deferred Retirement Compensation Program
• Voluntary participation.
• Program administered through Nationwide.
• Tax-deferred retirement investments through payroll deductions.

Contact Us:

Persons with a disability may request a reasonable accommodation such as a sign language interpreter or an alternative format by emailing careers@azahcccs.gov.
Requests should be made as early as possible to allow time to arrange the accommodation. The State of Arizona is an Equal Opportunity/Reasonable Accommodation Employer.