Role Description:

The IT Risk and Compliance Management Specialist will have a minimum of 10 years of experience with defining, implementing, and operating an IT Risk and Compliance Management function, including its framework, policies, standards, organization structure, staffing, process and tools and its integration with Enterprise Risk Management.

Responsibilities:

• Develop and implement the IT Risk and Compliance Management framework, processes, and tools.
  
• Deliver or lead training IT executive, IT Leader and Business Leader awareness and training on the IT Risk and Compliance Management framework and process.
  
• Conduct IT risk assessments with IT and business leaders to ensure IT risk are identified and mitigated to an acceptable level.
  
• Establish formal IT Risk and Compliance reporting at the company or Line of Business level.
  
• Publish an enterprise level IT Risk Report and present the report annually to the IT Executive.
  
• Conduct independent risk, compliance and controls assessments as requested by IT executives or leaders.
  
• Develop and implement IT policies/ standards and controls across all divisions.
  
• Other business analyst duties as assigned.
  

Skill Requirements/Qualifications:

The following are minimum qualifications and/or experience for the delivery of the Services:

• Bachelors Degree in Computer Engineering, Computer Science, Commerce or an equivalent field
  
• Minimum of ten (10) years of experience working as an IT Risk and Compliance Management Specialist
  
• Minimum of five (5) years of experience leading an IT Risk and Compliance Management function
  
• Excellent organizational, interpersonal and written communication skills
  
• Ability to deal with highly confidential matters.
  
• Knowledge of related policies, procedures, and practices
  
• Knowledge of business impact analysis.
  
• Ability to manage multiple priorities under strict deadlines.
  
• Demonstrated strong analytical and investigative skills with regard to complex issues. Develop and deliver training to IT security teams.
  
• Demonstrated ability to develop and maintain collaborative partnerships.
  
• Ability to relate to others with all levels of technical competency.
  
• Knowledge of security, IT process and control frameworks such as COBIT, ISO 27002, ITIL, TOGAF
  
• Strong critical thinking and decision making skills