Sr GRC Consultant

Role: GRC Consultant

Play a role as team member in the Technology Risk and Controls, Risk Assessment team, you will manage risk in technology service delivery to an acceptable level in addition to increasing the level of awareness and compliance with risk policy and process related matters. You will support identifying risk issues, events and remediation such risks across the enterprise. You will also participate in risk and control assessments and other adhoc projects as needed.

• Manage and support multiple initiatives or processes in one of the following core technology risk and controls functions in: Enterprise Technology Risk, IT General Controls, IT Risk Assessments.
• Promote open exchange of dialogue with team members to manage the risk culture – document remediations, etc.
• Identify and evaluate IT risks.
• Proactively view risk in multiple dimensions.
• Provide insight into the potential impact of risk.
• Produce strategies to mitigate / manage risks to communicate to various levels of leadership.
• Identify and produce trends as risks are documented.
• Be flexible in responding to changing circumstances / adjusting to new situations.
• Lead mid-sized risk and controls initiatives.
• Identify and resolve increasingly complex problems/issues/ assignments.
• Resolve unclear situations utilizing expertise in specialized field.
• Apply analysis and think outside the box to make decisions.
• Decision-making authority may extend beyond the area of specialization to include unit/team.
• Sets priorities and/or sequence of tasks to achieve objectives with minimal oversight.
• Influence often spans across units/teams and area of specialization.
• Provides guidance and support to peers.

What we are looking for

• 8+ years in technology governance and compliance, technology risk assessment, assurance, operations control, technology vendor and audit management, in banking, financial services, insurance industry.
• CISA, CISSP, CISM, CRISC, CGEIT, or other relevant certification is preferred.
• Knowledge of IT governance industry practices, standards, and framework (i.e. COBIT, NIST, etc.) preferred
• Proven track record of drawing conclusions and using data to solve problems.
• Organize self-starter with the ability to think critically.
• Communicate clearly and effectively with all internal and external stakeholders.
• Highly detail orientated.
• Take initiative, doesn’t let problem situations linger, and ensures service excellence and efficiency objectives are met.
• Ability to manage competing priorities — agility to manage competing, changing and sometimes conflicting priorities.
• Undergraduate degree in a relevant field or proven record of experience in technology roles with required years of experience.