WHAT YOU’LL DO :

• You will be responsible for overseeing IT governance, risk management, and compliance frameworks to protect the organization's assets, ensure regulatory compliance, and enhance operational efficiency. Specific responsibilities include:
• Lead and manage IT control testing, including tests of design and operating effectiveness, across areas such as access management, cloud security, and endpoint security.
• Coordinate with internal and external auditors on IT audits, including SOC 1 and SOC 2 reporting.
• Develop and implement IT risk assessments and mitigation strategies aligned with NIST, ISO, and COBIT frameworks.
• Maintain and update IT control libraries and ensure alignment with regulatory requirements.
• Provide training and guidance to team members on IT control testing and risk assessment.
• Generate detailed IT risk and compliance reports for executive leadership.
• Collaborate with cross-functional teams, including IT, legal, and business units, to ensure alignment on IT compliance objectives.
• Lead automation initiatives to optimize IT control testing and monitoring processes.

WHAT YOU’LL NEED:

• Advanced degree (MBA in Cybersecurity Management or equivalent) preferred.
• Relevant certifications: AWS Certified Cloud Practitioner, ITIL Foundation, ISC2 Certified in Cybersecurity (CC), or equivalent.
• 7+ years of experience in IT governance, risk, and compliance (GRC), IT control testing, or related fields.
• Proven track record of managing IT audits, including SOC reporting and regulatory compliance assessments.
• Strong knowledge of IT control frameworks, including NIST 800-53, ISO 27001, COBIT, and PCI DSS.
• Proficiency with GRC platforms (e.g., ServiceNow GRC, RSA Archer) and data analysis tools (Tableau, Power BI).
• Exceptional communication and stakeholder management skills.
• Ability to work independently and collaboratively in a fast-paced environment