The Role
Serves as the client-facing IT risk and governance lead for control-testing automation. Leads discovery sessions, maps controls to source data, identifies gaps and dependencies, defines thresholds, prioritizes implementation, and translates regulatory requirements into testable control logic with technical teams. Reviews solution designs, supports risk and audit requirements, and prepares implementation documentation. Requires extensive experience with IT risk, GRC, SOX ITGC, NYDFS, access controls, vulnerability management, asset management, Azure, and data mapping.
Summary Generated by Built In
We are looking for an experienced IT Risk and Governance professional who can work as the onshore delivery anchor for a large-scale control testing automation programme. The role will involve working closely with client Risk, Compliance, and Internal Audit teams, understanding the control requirements, mapping them to data, and working with the technical team to translate the requirements into testable controls.
Key Responsibilities
1) Act as the onshore point of contact for client Risk and Governance stakeholders.
2) Lead discovery sessions and walkthroughs with client SMEs.
3) Identify source systems and understand the controls and data available in each system.
4) Define control-to-data requirements and source-to-target mappings.
5) Identify data gaps, access issues, and dependencies during discovery.
6) Work with client stakeholders to define control thresholds and evaluation criteria.
7) Help prioritize control domains and define the implementation sequence.
8) Work with the technical team to translate control requirements into testable control logic.
9) Review the solution design to ensure it aligns with regulatory and business requirements.
10) Prepare discovery and implementation documentation.
Required Skills & Experience
1) 10+ years of experience in IT Risk & Governance, Information Security Controls, or GRC.
2) Strong knowledge of SOX ITGC, NYDFS, or similar regulatory frameworks.
3) Good understanding of Vulnerability Management, Logical Access Controls (PAM/IAM), and Asset Management.
4) Experience working with control testing, risk assessment, and audit requirements.
5) Ability to understand regulatory requirements and convert them into practical control requirements.
6) Experience working with data teams on data mapping, data requirements, and control automation.
7) Working knowledge of Azure and enterprise data warehouse concepts.
8) Familiarity with ITSM, Identity Governance, Vulnerability Management, and PAM tools.
9)Strong client-facing and stakeholder management skills.
10) Good communication and documentation skills.
11) Consulting or vendor-side delivery experience is preferred.
Skills Required
- 10+ years of experience in IT Risk and Governance, Information Security Controls, or GRC
- Strong knowledge of SOX ITGC, NYDFS, or similar regulatory frameworks
- Understanding of Vulnerability Management, Logical Access Controls including PAM and IAM, and Asset Management
- Experience with control testing, risk assessment, and audit requirements
- Ability to translate regulatory requirements into practical control requirements
- Experience working with data teams on data mapping, data requirements, and control automation
- Working knowledge of Azure and enterprise data warehouse concepts
- Familiarity with ITSM, Identity Governance, Vulnerability Management, and PAM tools
- Strong client-facing and stakeholder management skills
- Good communication and documentation skills
- Consulting or vendor-side delivery experience
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Anblicks is a Cloud Data Analytics Company based out of Dallas, TX, with offices in USA, India, and Australia. Since 2004, Anblicks has been helping customers by bringing value to their data and implementing modern data architecture and advanced analytics solutions in the cloud.
