{"@context":"https://schema.org","@type":"JobPosting","directApply":"https://schema.org/False","title":"Associate Director, Regulatory Risk, Compliance & Accreditation","description":"

Planned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care for all people, as well as the nation’s largest provider of sex education. Planned Parenthood organizations serve all people with care and compassion, with respect, and without judgment, striving to create equitable access to health care. Through health centers, programs in schools and communities, and online resources, Planned Parenthood is a trusted source of reliable education and information that allows people to make informed health decisions. We do all this because we care passionately about helping people lead healthier lives.

Planned Parenthood Federation of America (PPFA) is a 501(c)(3) charitable organization that supports the independently incorporated Planned Parenthood affiliates, which operate non-profit health centers across the U.S. PPFA also works to educate the public on and advocate for issues of sexual and reproductive health. Formed as the advocacy and political arm of Planned Parenthood Federation of America, Planned Parenthood Action Fund is a separate non-profit membership organization tax-exempt under section 501(c)(4). The Action Fund engages in educational, advocacy, and limited electoral activity, including grassroots organizing, legislative advocacy, and voter education in furtherance of the Planned Parenthood mission.

Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund seek a dynamic and effective Associate Director, Regulatory Risk, Compliance & Accreditation. This job reports to the Director, Information Security, Risk & Compliance in the Information Security department of PPFA. The Office of Information Security provides the strategy and implementation of the information security program that safeguards the data entrusted to Planned Parenthood by its patients, supporters, donors, and staff.

Purpose:

The Associate Director will serve as an Information Security & Technology (IS&T) Program Expert and Accreditor for the PPFA Accreditation & Certification Program, which works to assess and manage risks across the federation through routine evaluation of its affiliate and ancillary organizations.
The Associate Director is also responsible for PCI DSS compliance activities across the federation, which ensures that relevant internal controls are assessed and meet established information security, regulatory, operational, and reporting policies, regulations, and guidelines, while also providing support to the Third Party Risk Management (TPRM) Program, as needed.

Engagement:

The Associate Director will be part of the HIPAA, Risk & Compliance team.
This role will engage with the Information Security team, team members across the broader TSS division, the Accreditation & Evaluation Department (AED) team, Development, Finance, Office of the General Counsel and third party vendors.
This role will engage with the executive and operational staff within the PPFA National Office, affiliates, and ancillary organizations.

Delivery:

The Associate Director will deliver by evaluating security and technology systems, controls, and policies of affiliate and ancillary organizations, write reports that interpret assessment results and enumerate any findings, develop and track corrective actions, and assess efficacy of risk mitigation activities performed by the affiliate or ancillary organization.
The Associate Director will deliver by conducting PCI DSS compliance activities utilizing assessment tools to ensure regulatory compliance and risk management across the federation.
Conducts Accreditation and Certification interviews, risk assessments, and technical analyses to determine areas of risk and non-compliance with defined IS&T criteria aligned to cyber security frameworks (NIST CSF) and regulatory requirements (HIPAA Security, PCI DSS).
Uses broad and deep security knowledge and technical evaluation skills to help ensure risks are appropriately identified, assessed, and documented
Thoroughly reviews documentation, third party assessments, and audit samples for compliance with IS&T Accreditation criteria and identifies any discrepancies or corrective actions
Executes IS&T Accreditation processes and activities including attestation review and technical security control analysis and testing, where applicable, to validate control effectiveness
Escalates potential high or critical risk Accreditation findings to ensure alignment and appropriate notification and remediation activities
Weighs risk scope and impact when Identifying and articulating risk outcomes in final reports and presentations to Accreditation stakeholders
Reviews and assesses corrective action reports to determine effective remediation of identified Accreditation and PCI DSS risks
Identifies improvements and trends in review operations, criteria, and methodology, and develops plans and proposals to improve and evolve the IS&T Accreditation program/requirements over time
Identifies areas of continuous improvement in the evaluation process and criteria, and adjusts to the evolution of Accreditation operations and requirements
Ensures timely communications and project management of individual Accreditation reviews and PCI DSS compliance activities
Maintains thorough and organized tracking of Accreditation and PCI DSS requirements, assessment results, and corrective actions
Support and educate affiliates and ancillary organizations on required PCI DSS compliance activities
Review and update internal PCI DSS training content, policies, and procedures, as necessary, for national office staff.
Execute annual PCI DSS self-assessment questionnaires for all payment flows to identify security and technical deficiencies and collaborate across teams to remediate appropriately.
Finalize and obtain signature for annual PCI DSS AOC.
Facilite required vulnerability scanning of relevant cardholder data environments (CDEs), which includes running a quarterly scan, identifying security and technical deficiencies, ensuring appropriate scope, and following up for remediations or documenting exceptions.
Obtain and manage external PCI DSS vendors’ AOCs
Support the PPFA TPRM team, as needed
Communicates professionally and effectively with technical, non-technical, and executive stakeholders
All other duties as assigned

Knowledge, Skills and Abilities (KSAs):

Bachelor’s degree and 5+ years of industry experience is required
Experience with compliance requirements and industry standards (HIPAA Security, PCI DSS, NIST, CIS, etc.) is required
Current industry certifications, particularly security and/or auditing certifications, a plus (CISA, CRISC, GSEC, etc.)
Understanding of Information Security, Risk and Compliance
Minimum of 2 years of experience in governance, risk, and compliance (GRC), assessing, auditing, accreditation, and evaluating or implementing IT and information security controls, including experience reviewing information security systems, policies, processes, technology environments, internal control frameworks, compliance requirements, and audit programs.
A deep understanding of IT and information security environments and administration
Strong written and verbal communication, including technical and non-technical writing skills
Strong attention to detail and analytical skills
Ability to balance firm adherence to security practices and flexibility in a fast-paced and continuously changing environment
Ability to maintain neutrality and fairness in the review process, and avoid or raise any possible bias
Knowledge of security technologies (security tools, networking, device protections, encryption, data protection, identity and access management, etc.)
Commitment and track record of advancing racial equity in both operations and communications.
High proficiency in Google products
Flexibility and ability to adapt to quickly changing priorities and ambiguous situations

","identifier":"https://remote.com/jobs/planned-parenthood-federation-of-america-c1gd6xvi/associate-director-regulatory-risk-compliance-accreditation-j1lngtt4","employmentType":"FULL_TIME","hiringOrganization":{"@type":"Organization","name":"Planned Parenthood Federation of America","sameAs":"http://Planned Parenthood Federation of America","logo":"https://cdn.talent-assets.remote.com/company_logos/3b9be4a1-4d30-48ac-8f07-cad4ee4e7178company_logo.png"},"datePosted":"2026-07-12T19:55:29Z","applicantLocationRequirements":[{"@type":"Country","name":"Albania"},{"@type":"Country","name":"Algeria"},{"@type":"Country","name":"American Samoa"},{"@type":"Country","name":"Andorra"},{"@type":"Country","name":"Angola"},{"@type":"Country","name":"Anguilla"},{"@type":"Country","name":"Antigua and Barbuda"},{"@type":"Country","name":"Argentina"},{"@type":"Country","name":"Armenia"},{"@type":"Country","name":"Aruba"},{"@type":"Country","name":"Australia"},{"@type":"Country","name":"Austria"},{"@type":"Country","name":"Azerbaijan"},{"@type":"Country","name":"Bahamas"},{"@type":"Country","name":"Bahrain"},{"@type":"Country","name":"Bangladesh"},{"@type":"Country","name":"Barbados"},{"@type":"Country","name":"Belgium"},{"@type":"Country","name":"Belize"},{"@type":"Country","name":"Benin"},{"@type":"Country","name":"Bermuda"},{"@type":"Country","name":"Bhutan"},{"@type":"Country","name":"Bolivia"},{"@type":"Country","name":"Bosnia and Herzegovina"},{"@type":"Country","name":"Botswana"},{"@type":"Country","name":"Brazil"},{"@type":"Country","name":"British Virgin Islands"},{"@type":"Country","name":"Brunei"},{"@type":"Country","name":"Bulgaria"},{"@type":"Country","name":"Burkina Faso"},{"@type":"Country","name":"Burundi"},{"@type":"Country","name":"Cabo Verde"},{"@type":"Country","name":"Cambodia"},{"@type":"Country","name":"Cameroon"},{"@type":"Country","name":"Canada"},{"@type":"Country","name":"Cayman Islands"},{"@type":"Country","name":"Central African Republic (CAR)"},{"@type":"Country","name":"Chad"},{"@type":"Country","name":"Chile"},{"@type":"Country","name":"China"},{"@type":"Country","name":"Christmas Island"},{"@type":"Country","name":"Cocos (Keeling) Islands"},{"@type":"Country","name":"Colombia"},{"@type":"Country","name":"Comoros"},{"@type":"Country","name":"Cook Islands"},{"@type":"Country","name":"Costa Rica"},{"@type":"Country","name":"Cote d'Ivoire"},{"@type":"Country","name":"Croatia"},{"@type":"Country","name":"Curacao"},{"@type":"Country","name":"Cyprus"},{"@type":"Country","name":"Czech Republic"},{"@type":"Country","name":"Democratic Republic of the Congo"},{"@type":"Country","name":"Denmark"},{"@type":"Country","name":"Djibouti"},{"@type":"Country","name":"Dominica"},{"@type":"Country","name":"Dominican Republic"},{"@type":"Country","name":"Ecuador"},{"@type":"Country","name":"Egypt"},{"@type":"Country","name":"El Salvador"},{"@type":"Country","name":"Equatorial Guinea"},{"@type":"Country","name":"Eritrea"},{"@type":"Country","name":"Estonia"},{"@type":"Country","name":"Ethiopia"},{"@type":"Country","name":"Falkland Islands (Malvinas)"},{"@type":"Country","name":"Faroe Islands"},{"@type":"Country","name":"Fiji"},{"@type":"Country","name":"Finland"},{"@type":"Country","name":"France"},{"@type":"Country","name":"French Guiana"},{"@type":"Country","name":"French Polynesia"},{"@type":"Country","name":"Gabon"},{"@type":"Country","name":"Gambia"},{"@type":"Country","name":"Georgia"},{"@type":"Country","name":"Germany"},{"@type":"Country","name":"Ghana"},{"@type":"Country","name":"Gibraltar"},{"@type":"Country","name":"Greece"},{"@type":"Country","name":"Greenland"},{"@type":"Country","name":"Grenada"},{"@type":"Country","name":"Guadeloupe"},{"@type":"Country","name":"Guam"},{"@type":"Country","name":"Guatemala"},{"@type":"Country","name":"Guernsey"},{"@type":"Country","name":"Guinea"},{"@type":"Country","name":"Guinea-Bissau"},{"@type":"Country","name":"Guyana"},{"@type":"Country","name":"Haiti"},{"@type":"Country","name":"Honduras"},{"@type":"Country","name":"Hong Kong"},{"@type":"Country","name":"Hungary"},{"@type":"Country","name":"Iceland"},{"@type":"Country","name":"India"},{"@type":"Country","name":"Indonesia"},{"@type":"Country","name":"Ireland"},{"@type":"Country","name":"Isle of Man"},{"@type":"Country","name":"Israel"},{"@type":"Country","name":"Italy"},{"@type":"Country","name":"Jamaica"},{"@type":"Country","name":"Japan"},{"@type":"Country","name":"Jersey"},{"@type":"Country","name":"Jordan"},{"@type":"Country","name":"Kazakhstan"},{"@type":"Country","name":"Kenya"},{"@type":"Country","name":"Kiribati"},{"@type":"Country","name":"Kosovo"},{"@type":"Country","name":"Kuwait"},{"@type":"Country","name":"Kyrgyzstan"},{"@type":"Country","name":"Laos"},{"@type":"Country","name":"Latvia"},{"@type":"Country","name":"Lebanon"},{"@type":"Country","name":"Lesotho"},{"@type":"Country","name":"Liberia"},{"@type":"Country","name":"Libya"},{"@type":"Country","name":"Liechtenstein"},{"@type":"Country","name":"Lithuania"},{"@type":"Country","name":"Luxembourg"},{"@type":"Country","name":"Macao"},{"@type":"Country","name":"Madagascar"},{"@type":"Country","name":"Malawi"},{"@type":"Country","name":"Malaysia"},{"@type":"Country","name":"Maldives"},{"@type":"Country","name":"Mali"},{"@type":"Country","name":"Malta"},{"@type":"Country","name":"Marshall Islands"},{"@type":"Country","name":"Martinique"},{"@type":"Country","name":"Mauritania"},{"@type":"Country","name":"Mauritius"},{"@type":"Country","name":"Mayotte"},{"@type":"Country","name":"Mexico"},{"@type":"Country","name":"Micronesia"},{"@type":"Country","name":"Moldova"},{"@type":"Country","name":"Monaco"},{"@type":"Country","name":"Mongolia"},{"@type":"Country","name":"Montenegro"},{"@type":"Country","name":"Montserrat"},{"@type":"Country","name":"Morocco"},{"@type":"Country","name":"Mozambique"},{"@type":"Country","name":"Namibia"},{"@type":"Country","name":"Nauru"},{"@type":"Country","name":"Nepal"},{"@type":"Country","name":"Netherlands"},{"@type":"Country","name":"New Caledonia"},{"@type":"Country","name":"New Zealand"},{"@type":"Country","name":"Nicaragua"},{"@type":"Country","name":"Niger"},{"@type":"Country","name":"Nigeria"},{"@type":"Country","name":"Niue"},{"@type":"Country","name":"Norfolk Island"},{"@type":"Country","name":"Northern Mariana Islands"},{"@type":"Country","name":"North Macedonia"},{"@type":"Country","name":"Norway"},{"@type":"Country","name":"Oman"},{"@type":"Country","name":"Pakistan"},{"@type":"Country","name":"Palau"},{"@type":"Country","name":"Palestine"},{"@type":"Country","name":"Panama"},{"@type":"Country","name":"Papua New Guinea"},{"@type":"Country","name":"Paraguay"},{"@type":"Country","name":"Peru"},{"@type":"Country","name":"Philippines"},{"@type":"Country","name":"Poland"},{"@type":"Country","name":"Portugal"},{"@type":"Country","name":"Puerto Rico"},{"@type":"Country","name":"Qatar"},{"@type":"Country","name":"Republic of the Congo"},{"@type":"Country","name":"Réunion"},{"@type":"Country","name":"Romania"},{"@type":"Country","name":"Rwanda"},{"@type":"Country","name":"Saint Helena"},{"@type":"Country","name":"Saint Kitts and Nevis"},{"@type":"Country","name":"Saint Lucia"},{"@type":"Country","name":"Saint Pierre and Miquelon"},{"@type":"Country","name":"Saint Vincent and the Grenadines"},{"@type":"Country","name":"Samoa"},{"@type":"Country","name":"San Marino"},{"@type":"Country","name":"Sao Tome and Principe"},{"@type":"Country","name":"Saudi Arabia"},{"@type":"Country","name":"Senegal"},{"@type":"Country","name":"Serbia"},{"@type":"Country","name":"Seychelles"},{"@type":"Country","name":"Sierra Leone"},{"@type":"Country","name":"Singapore"},{"@type":"Country","name":"Slovakia"},{"@type":"Country","name":"Slovenia"},{"@type":"Country","name":"Solomon Islands"},{"@type":"Country","name":"Somalia"},{"@type":"Country","name":"South Africa"},{"@type":"Country","name":"South Korea"},{"@type":"Country","name":"South Sudan"},{"@type":"Country","name":"Spain"},{"@type":"Country","name":"Sri Lanka"},{"@type":"Country","name":"Sudan"},{"@type":"Country","name":"Suriname"},{"@type":"Country","name":"Swaziland"},{"@type":"Country","name":"Sweden"},{"@type":"Country","name":"Switzerland"},{"@type":"Country","name":"Taiwan"},{"@type":"Country","name":"Tajikistan"},{"@type":"Country","name":"Tanzania"},{"@type":"Country","name":"Thailand"},{"@type":"Country","name":"Timor-Leste"},{"@type":"Country","name":"Togo"},{"@type":"Country","name":"Tonga"},{"@type":"Country","name":"Trinidad and Tobago"},{"@type":"Country","name":"Tunisia"},{"@type":"Country","name":"Turkey"},{"@type":"Country","name":"Turkmenistan"},{"@type":"Country","name":"Turks and Caicos Islands"},{"@type":"Country","name":"Tuvalu"},{"@type":"Country","name":"Uganda"},{"@type":"Country","name":"Ukraine"},{"@type":"Country","name":"United Arab Emirates (UAE)"},{"@type":"Country","name":"United Kingdom (UK)"},{"@type":"Country","name":"United States"},{"@type":"Country","name":"Uruguay"},{"@type":"Country","name":"U.S. Virgin Islands"},{"@type":"Country","name":"Uzbekistan"},{"@type":"Country","name":"Vanuatu"},{"@type":"Country","name":"Vatican City (Holy See)"},{"@type":"Country","name":"Vietnam"},{"@type":"Country","name":"Wallis and Futuna Islands"},{"@type":"Country","name":"Yemen"},{"@type":"Country","name":"Zambia"},{"@type":"Country","name":"Zimbabwe"}],"jobLocationType":"TELECOMMUTE","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":125000,"maxValue":130000,"unitText":"YEAR"}}}