Senior Manager, Network Audit and Compliance

The Ideal Candidate

Do you enjoy complex puzzles and challenging problems?  Do you believe comprehensive risk analysis should guide design decisions?  Do you value structured processes and continuous improvement?  Do you believe that security and reliability are achieved through comprehensive risk assessment, problem avoidance, detailed planning, and precise execution? Do you believe variability and complexity are the anthesis of stability and reliability?  If you answer yes to each, then Oracle’s IES Networking Organization is looking for YOU! 

Who we are

Oracle Cloud continues innovative breakthroughs providing Autonomous Database and cloud services to an ever-increasing customer base.  Oracle’s Infrastructure Engineering Services (IES) Cloud Services group is an industry leader focused on innovation, service delivery, and migration of traditional, on-premises workloads to Oracle Cloud Infrastructure. Our customer base includes fortune 500 and industry leaders across a variety of sectors including Health, AI, Federal/Government, Communications, Financial Services, Life Sciences, Hospitality, Retail, Utilities, Construction and Engineering.  Together, we are purposeful, industry leading experts in cloud service delivery providing the next generation of Cloud services hosted in the Oracle Cloud.

What we do

Within IES, the Cloud & Data Center Network Engineering group plays a critical and central role in Oracle Health & AI (OHAI), providing a secure, highly available, and reliable network infrastructure spanning multiple US and International hosting environments.  The expansive world-wide network includes physical data centers, OCI and hybrid cloud environments, all of which provide hosting to Oracle Health customers and numerous Global Industry Units (GIUs). The group’s responsibilities include traditional routing and switching, advanced fabric technologies, application delivery, network automation, virtual cloud networking, transit services, network security, and full lifecycle management of hardware and software components.  The migration of Cerner and OHAI tenants to Oracle Cloud Infrastructure (OCI) is a core priority of the group. 

What you will do

As the Network Audit and Compliance Manager you will lead a team of highly skilled network engineers, program managers, and security champions maintaining standard operating procedures and demonstrating network controls.  The audit and compliance manager ensures the group adheres to established policies & regulations ensuring readiness for multiple industry standard audits and compliance evaluations.  In a structured approach, your team will continuously assess and evaluate network systems and process readiness for HIPAA, NIST, PCI DSS, GDPR, SOC 1 & 2, ISO 27001, SOX, as well as other internal & external audits. 

The Networking Audit and Compliance Manager serves as the organizational leader & senior security champion ensuring preparedness for organizational audits, compliance reviews, vulnerability management, security controls and standard operating procedure (SOP) alignment.  You will be responsible for the development, establishment, and communication of security policies, standards, guidelines, and the education and awarness of these requirements across our network organization.  You will prepare for and perform internal audits, develop procedures, and assess potential risks to the network environments.  Additionally, you will drive vulnerability remediation for network assets including triage and workflow management across the networking organization.  The role advises Senior Leadership, LOB & OCI’s Security teams.

Duties and Core Responsibilities

• Manage the compliance program: Implement and oversee the networking compliance program that promotes awareness and enforces adherence to all prescribed compliance requirements. Stay informed about changes in national and international laws, industry standards, and government directives that could impact the organization. 
• Establish and maintain networking policies: Develop, implement, review, and maintain network security policies, standards, and procedures based on Oracle Security and regulatory requirements (e.g., HIPAA, PCI DSS, NIST, SOC1 /3, etc.).
• Liaison with External Bodies: Interact with external auditors and regulatory bodies to defend the company's compliance systems and ensure proper documentation and adherence to requirements. 
• Create a compliance framework: Build and maintain a networking controls matrix aligned with multiple compliance frameworks to ensure continuous adherence across the organization.  
• Advise leadership: Report to and advise senior leadership of existing risks, vulnera