Overview:
the role:
the principal i of technology governance risk and compliance acts as a technical expert, focusing on providing expertise, guidance, and support on risk management topics.
this role supports continuous improvement of governance and risk management methodologies, tools and processes to ensure proactive oversight and management of the technology risk landscape.
- how you would contribute:
- 8+ years experience to provide technical expertise on it governance and risk management tools and processes.
- act as subject matter expert (sme) on it governance risk management best practices.
- identify control weaknesses, regulatory compliance issues, and potential areas of risk across all segments of technology.
- mentor team members to understand the risk management best practices, policies and procedures.
- maintain current knowledge of applicable regulations and policies relevant to gdts.
- lead the design, development and implementation of new risk management tools, processes and best practices across tech projects and programs.
- deliver reliable solutions on-time, with mínimal supervision.
- develop a cooperative environment that fosters knowledge sharing and technical growth.
- provide guidance for technology teams for full end-to-end implications of decisions in area of expertise.
- this role must proactively escalate potential risks to leadership and be outspoken in seeking mitigation actions.
- produce vulnerability reports (app sec, infra, cloud, ot, iot) from multiple scans
- analyze and follow up on vulnerabilities
generate powerbi reports
what's special about the team:
tech grc is global team collaborating with it, cybersecurity, privacy, enterprise risk among other risk teams in the company, to manage technology risks and provide proactive risk solutions.
our vision is to provide risk information to support fact-based decision making, aligned with our enterprise strategy.
supervisory responsibilities: n/a.
job qualifications:
skills and background required to be successful:
- excellent written and verbal communication skills.
communicates effectively to both technical and executive audiences.
- strong interpersonal and influencing skills.
- expert level knowledge in governance and risk management policies, procedures, tools and best practices.
- expert level understanding of it landscape to be able identify and articulate gaps from a risk management and service continuity perspective.
- deep knowledge of governance, risk and compliance requirements for the business.
- knowledge of industry best practice risk management methodologies, tools, and processes.
- creative problem solving and innovation.
- able to work effectively and collaborate with multi-disciplinary teams.
certificates / training:
- crisc
- cisa
- cissp
- cisrcp
- cc(grc)p
*education*:
- required: bachelor's in information technology or equivalent.
- preferred: advanced technical degree.