Senior IT GRC Advisor responsible for IT risk assessments and compliance consulting. Collaborating with management to strengthen internal controls and conduct IT audit engagements.
Responsibilities
The Senior GRC IT Advisor will be responsible for conducting IT risk assessments and consulting with management on risk, control and compliance matters.
Provide support and/ or co-facilitates risk assessments (information technology, strategic, operational, financial, compliance, etc.) throughout the organization.
Provides recommendation to management for improvement of overall control environment.
Collaborates with management to strengthen IT internal controls and/or develop corrective action plans to remediate risks.
Advise on IT projects and key initiatives providing risk management expertise to ensure risks are identified, assessed and mitigated to an acceptable level.
Lead and execute audit and advisory engagements of information systems, infrastructure, and IT processes to evaluate the high risk areas to determine the adequacy of policies, procedures and controls and, where appropriate, compare to industry best practices and control frameworks such as the Control Objective for Information and related Technology (COBIT), National Institute of Standards and Technology, Information Technology Infrastructure Library (ITIL) and other relevant authoritative bodies.
Performs assessments of third party vendors (including cloud systems) to evaluate compliance with contractual and regulatory requirements and IT security best practices.
Develops and maintains risk management methodologies, tools, templates, internal websites and internal and/or external reports to ensure the quality and effectiveness of GRC initiatives and deliverables.
Develop and adhere to GRC standards, policies and procedures designed to strengthen CCNC’s internal control environment.
Requirements
Bachelor’s degree in a technology or audit related field
Minimum 5-years experience in IT auditing, IT Security or IT risk management
At least 5-years experience leading, planning, conducting and overseeing complex IT audit and advisory engagements
Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM)
Preferred: Working knowledge of the HIPAA Security Rule
Experience conducting AI Audits and AI Governance Assessments
Trade Compliance & Cross - Border Operations Manager managing compliance for SAS’s U.S. - Mexico operations. Responsible for ensuring accurate trade compliance and financial alignment with customs documentation.
Director of Compliance overseeing compliance program for secure, compliant software solutions to the U.S. federal government. Collaborating with teams to ensure adherence to laws, regulations, and internal policies.
Advising international clients on Extended Producer Responsibility (EPR) regulations and compliance strategies. Aiming for a sustainable circular economy and maximizing resource efficiency.
Food Safety & Compliance Specialist at FIFCO USA responsible for managing food safety and compliance audits. Ensuring quality systems and documentation adhere to regulatory standards while training teams.
Regional Clinical Compliance Manager at BeOne responsible for implementing compliance and inspection management for global activities. Ensures regulatory compliance and oversees quality support for GCO study teams.
Specialist in Compliance promoting laws and internal guidelines within Pirelli's German operations. Managing risks and supporting compliance strategy development.
Analyst managing compliance risks for Grupo Cibest S.A in Medellín, Colombia. Implementing control environments, monitoring risks, and reporting compliance metrics.
Compliance Governance Officer coordinating compliance processes and supporting training at Zurich. Engaging in data analysis and ensuring regulatory compliance in financial services.
Director of Regulatory Affairs leading global regulatory strategy for Braveheart Bio’s Phase 3 HCM program. Collaborating with cross - functional teams and ensuring successful regulatory submissions.
Compliance Officer ensuring compliance with investment regulations within Invesco's fixed income team. Analyzing exceptions and resolving compliance issues while collaborating with trading teams and stakeholders.