We are seeking an experienced IT Risk Manager/Senior IT Controls Specialist to join our team. In this role, you'll help develop our Controls Assurance framework, lead IT control assessments, and monitor compliance with internal policies and industry standards. The ideal candidate will have strong experience in IT risk, audit, and control testing, with a deep understanding of compliance frameworks like SOX, NIST, ISO, and CIS Controls.
Key Responsibilities:
Build and implement a Controls Assurance framework, including Control Assessments (design), Sample-Based Control Testing (operational), and Controls Monitoring.
Conduct basic to complex IT Control Assessments and technology reviews to ensure compliance with internal policies and regulatory requirements.
Implement and monitor technology controls to mitigate security risks.
Collaborate with the user community to understand risk, control, and compliance needs.
Perform root cause analysis of control issues and recommend remediation actions.
Build management reports using PowerBI and similar tools.
Use GRC tools like ServiceNow IRM for compliance tracking and controls management.
Qualifications:
8+ years of experience in IT Risk or IT Audit.
Extensive knowledge of SOX, NIST, ISO, and CIS Controls.
Experience with Technology Audits and implementing control assurance frameworks.
Hands-on experience with ServiceNow IRM and PowerBI.
Strong analytical and communication skills.
Skills & Tools:
GRC tools (especially ServiceNow IRM)
PowerBI for reporting
Familiarity with NIST, ISO, SOX, CIS Controls
Advanced understanding of IT risk, compliance, and controls methodologies