Governance, Risk and Compliance Lead at GM Financial leading compliance, risk management, and governance frameworks within technology domains. Focused on innovative analysis and complex reviews for risk remediation.
Responsibilities
Develop compliance, control, risk management, and governance frameworks
Design compliance, testing, continuous monitoring, self-assessment and validation methodologies
Perform compliance and risk reviews and document results to allow external reliance
Understand patterns across risks and issues, ensure understanding by technology leaders and recommend systemic paths to resolution
Develop, enhance and perform reviews to ensure that major technology initiatives have appropriate controls and risk mitigate activities
Understand and document the domain technology and process landscape to identify risk levels
Facilitate identification and resolution of policy and standards gaps and advise leadership on roadmaps for achieving compliance
Influence technology owners to action through expertise, credibility and escalation
Assess GRC knowledge gaps, create role-based training and facilitate large-scale training events
Own a GRC practice (e.g. policy, regulatory, issue management, work practices, etc.) on behalf of the team
Manage multiple initiatives to successful implementation
Requirements
Strong working knowledge of Sarbanes-Oxley (SOX) and other applicable government regulations
Strong knowledge of project management methodologies, application development lifecycle, and organizational change management
Advanced knowledge of information technology systems, infrastructure and operations
Advanced working knowledge of information systems and operations systems and databases
Advanced knowledge of business processes for supported business groups
Advanced knowledge of information technology systems, infrastructure and operations
Working knowledge of Azure, UNIX, Linux, Oracle, iSeries, Cisco, Windows and general IT best practices
Working knowledge of security and control management best practices such as COBIT, COSO, ITIL, and ISO
Strong in the use of Microsoft Office software including strong ability to analyze data using Excel for reporting and data mining purposes
Ability to meet expected delivery dates and the tasks necessary to achieve objectives
Ability to interact with staff at all levels
Excellent writing and speaking skills
Strong people skills
Advance experience with data visualization concepts and tools
Proven ability to deliver mission critical software development projects
Ability to effectively lead, organize, and supervise as needed
7-10 years combined experience in Information Technology, Audit and Compliance disciplines required
High School Diploma or equivalent required
Bachelor’s Degree in related field or equivalent experience required
Master’s Degree preferred
CIA, CISA, CPA, CISSP, or CRISC Upon Hire preferred
Professional certifications such as ITIL or PMI preferred
Benefits
401K matching
bonding leave for new parents (12 weeks, 100% paid)
Intern supporting Government Affairs & Regulatory Law Group in legislative process analysis and research tasks. Engaging in client meetings and preparing tracking reports throughout the internship.
Trainee in Infosec GRC at SEK developing security policies and handling risk assessments. Focusing on ISO standards and technical compliance across projects.
Compliance intern at Dräger assisting in the global compliance management system and related compliance processes in Lübeck. Gaining practical experience in an international compliance team.
Compliance Analyst responsible for ensuring regulatory compliance within the financial sector in Brazil. Engaging in policy development and collaboration with regulatory bodies.
Compliance Manager coordinating SOX, CFTC, FERC compliance activities for NextEra Energy. Collaborating with teams to ensure regulatory adherence and mitigate compliance risks.
Global Trade Compliance Specialist managing international trade compliance and strategies at McCormick. Analyzing regulations and ensuring adherence to laws for importing and exporting activities.
Compliance Testing Manager at TD Bank responsible for independent testing oversight and QA. Leading compliance initiatives and providing expertise across projects and engagements.
Senior Compliance Testing Analyst executing independent testing of compliance controls at TD Bank. Collaborating with Compliance Monitoring and Testing Program Team on various testing engagements.
Manage the registration and post - registration of food products at Tirolez, Brazil's largest cheese manufacturer. Ensure compliance with regulatory requirements and maintain quality standards.