FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in IT Risk Management, Governance, and Compliance, with a strong focus on integrating GRC methodologies and frameworks. Proficient in evaluating control effectiveness and implementing process improvements within highly regulated environments.
Highest-signal resume keywords
IT Risk ManagementGRC PrinciplesISO, NIST, COBIT, PCI DSSRegulatory Requirements (GDPR, DORA, CRA, SOX)Archer or Comparable GRC Platforms
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Information SecuritySecurity ComplianceIT AuditControl Effectiveness EvaluationMethodology DevelopmentProcess ImprovementDocumentation DevelopmentCross-Mapping of ControlsAnalytical JudgmentProblem-Solving
Soft Skills
Strong Communication SkillsInterpersonal SkillsOrganizational SkillsCritical ThinkingAbility to Manage Multiple Priorities
Tools & Technologies
Unified Compliance ToolMicrosoft OfficeM365 ProductsPowerAppsPower BIGenerative AI Technologies
Industry Keywords
IT Risk Management FrameworkGovernance FrameworksCompliance-Driven EnvironmentsPolicy Governance ActivitiesCross-Functional Team Collaboration
About the role
Key responsibilities & impact- Administer and enhance the IT PRC Framework underpinning Policy and Risk Management Programs
- Integrate IT risk domains, risk categories, processes, control objectives, common controls, Information Security documents, and authoritative sources
- Partner with the Global Methodology Program Lead on service offerings, strategy, goals, objectives, and IT Risk Management methodologies
- Contribute to implementation, maintenance, and evolution of the PRC Framework operating model
- Facilitate adoption and integration across team and organizational projects, programs, and emerging initiatives
- Serve as a subject matter expert in IT risk management, governance, compliance, and control frameworks
- Research industry trends, emerging risks, and regulatory changes and integrate best practices into methodology enhancements
- Identify process improvements, innovative practices, and operational efficiencies
- Develop and maintain documentation, processes, procedures, and program artifacts
- Develop and refine cross-mappings of PRC common controls against Information Security policies, standards, regulatory requirements, and industry requirements
- Partner with Risk, Control, Compliance, and Assessment teams on control gap assessments and methodology initiatives
- Support integration, adoption, and effective use of GRC technologies, including the Unified Compliance tool
- Facilitate stakeholder engagement and cross-functional working sessions
- Support risk-focused promotional campaigns and expand organizational understanding of risk responsibilities and expectations
- Build and maintain relationships with Information Security, Client and Enterprise Technology, Global and Enterprise Risk Management, Internal Audit, and Legal stakeholders
Requirements
What you’ll need- 3–5 years of progressive experience in Information Technology, Information Security, Security Compliance, IT Audit, IT Risk Management, or related disciplines
- Advanced degree in Computer Science, Information Security, Risk Management, or a related field, or equivalent work experience
- Demonstrated knowledge of GRC principles and their application within technology, information security, and risk management environments
- Familiarity with Archer or comparable GRC platforms and tools
- Working knowledge and practical experience with ISO, NIST, COBIT, PCI DSS, and the Unified Compliance Framework
- Knowledge of GDPR, DORA, CRA, and SOX regulatory requirements
- Experience evaluating control effectiveness, supporting methodology development, and recommending process or control improvements
- Ability to interpret and apply regulatory, policy, control, and framework requirements within business and technology environments
- Experience working effectively within global, cross-functional, and virtual teams
- Strong English language skills, including written, verbal, presentation, and interpersonal communication abilities
- Knowledge of Information Security principles, IT risk management practices, and GRC methodologies and frameworks
- Strong analytical judgment, critical thinking, and problem-solving skills
- Strong organizational skills and ability to manage multiple priorities and shifting demands
- Ability to leverage automation and technology solutions
- Aptitude for learning and applying new technologies, tools, and methodologies
- Experience supporting methodology, governance, policy, or control framework initiatives is advantageous
- Experience in highly regulated or compliance-driven environments is advantageous
- Experience communicating with management, clients, and vendors is advantageous
- Experience developing executive-level presentations and briefings is advantageous
- Knowledge of policy governance activities is advantageous
- Skilled in Microsoft Office and M365 products, including Word, Excel, PowerPoint, SharePoint, PowerApps, Power BI, and Generative AI technologies
Benefits
Comp & perks- Flexible working arrangements
- Continuous learning and career development opportunities
- Tools, coaching, and flexibility to make a significant impact
- Transformative leadership, insights, coaching, and confidence-building
- Diverse and inclusive culture
- Reasonable accommodations for individuals with disabilities
- Benefits focused on physical, emotional, financial, and social well-being
- Other country-specific benefits available through the recruiter