We are looking for an experienced IT Risk and Governance professional who can work as the onshore delivery anchor for a large-scale control testing automation programme. The role will involve working closely with client Risk, Compliance, and Internal Audit teams, understanding the control requirements, mapping them to data, and working with the technical team to translate the requirements into testable controls.
Key Responsibilities
1) Act as the onshore point of contact for client Risk and Governance stakeholders.
2) Lead discovery sessions and walkthroughs with client SMEs.
3) Identify source systems and understand the controls and data available in each system.
4) Define control-to-data requirements and source-to-target mappings.
5) Identify data gaps, access issues, and dependencies during discovery.
6) Work with client stakeholders to define control thresholds and evaluation criteria.
7) Help prioritize control domains and define the implementation sequence.
8) Work with the technical team to translate control requirements into testable control logic.
9) Review the solution design to ensure it aligns with regulatory and business requirements.
10) Prepare discovery and implementation documentation.
Required Skills & Experience
1) 10+ years of experience in IT Risk & Governance, Information Security Controls, or GRC.
2) Strong knowledge of SOX ITGC, NYDFS, or similar regulatory frameworks.
3) Good understanding of Vulnerability Management, Logical Access Controls (PAM/IAM), and Asset Management.
4) Experience working with control testing, risk assessment, and audit requirements.
5) Ability to understand regulatory requirements and convert them into practical control requirements.
6) Experience working with data teams on data mapping, data requirements, and control automation.
7) Working knowledge of Azure and enterprise data warehouse concepts.
8) Familiarity with ITSM, Identity Governance, Vulnerability Management, and PAM tools.
9)Strong client-facing and stakeholder management skills.
10) Good communication and documentation skills.
11) Consulting or vendor-side delivery experience is preferred.
