IT Governance Risk Compliance Lead

Job Summary

To support the IT Governance, Risk, and Compliance function, the remote IT Governance Risk Compliance Lead will manage cyber risk assessments, maintain the IT General Control framework, and drive process improvements while ensuring compliance with industry standards.

Key responsibilities

• Execute cyber risk assessment and compliance programs, leading engagements to identify and mitigate cyber security risks
• Maintain the IT General Control framework by identifying key controls and documenting control processes
• Enhance IT maturity and internal controls through process improvement initiatives and automation

Required qualifications

• Five or more years of experience in IT risk management, operational audit, or a related field
• Knowledge of NIST CSF and C2M2 maturity frameworks and relevant assessment practices
• Experience in assessing risk and control effectiveness for IT and operational controls
• Competence in managing audit requests and documenting evidence
• Ability to manage multiple priorities and contribute to complex projects involving various stakeholders