The ideal candidate has a combined audit or risk management experience with a solid understanding of technology and system controls. The candidate will support the organization's technology governance, risk, audit, and compliance activities and will work closely with business and technical teams to strengthen internal controls, assess risks, coordinate audits, and promote effective governance practices across technology functions.
Responsibilities
- Demonstrated experience in technology governance, risk management, and compliance initiatives support.
- Prepare governance, risk, and compliance reports to support informed decision-making.
- Experience in technology and operational risks assessment and recommendations to practical mitigation strategies.
- Develop, maintain, and monitor risk registers, control documentation, and governance reporting.
- Collaborate with technical and business teams to embed appropriate controls into systems, processes, and projects.
- Internal and external audits coordination, including tracking findings and remediation activities.
- Analyze audit results and translate findings into actionable improvement plans.
- Monitor remediation efforts and provide regular status updates to leadership and stakeholders.
- Facilitate governance meetings and promote accountability for risk and control activities.
- Develop and maintain key metrics to measure risk exposure, control effectiveness, and compliance performance.
- Support ongoing audit readiness by maintaining documentation and improving governance processes.
- Ensure technology governance activities align with organizational policies, regulatory requirements, and industry best practices.
- Identify opportunities to enhance governance frameworks, standardize controls, and improve operational resilience.
Requirements
- Experience in IT audit and governance, risk management, compliance, or a related field.
- Solid understanding of technology controls, governance frameworks, and risk management principles.
- Experience coordinating audits and managing remediation activities.
- Ability to translate technical risks into clear business recommendations.
- Experience working with cross-functional business and technology teams.
- Certifications in any of the following: CISSP, CISA, CGEIT, CRISC, or equivalent, are ideal.
