Governance and Compliance Manager

Purpose of Position: 

The Information Technology Governance and Compliance manager owns the IT governance framework, this role is meant to function as first and second line risk for IT, line 1.5. 

Essential Job Functions:

1. Responsible for managing all request and interactions from second line risk, third line audit, external audit, and SOX.
2. IT representative for all audit related initiatives. Including but not limited to attending all audit calls, gathering evidence artifacts independently where possible and speaking to the IT control environment. 
3. Accountable for definition, documentation, and build out of IT governance framework
4. Ownership over development and maintenance of the Information Technology General Controls (ITGC).
5. Responsible for all Policies, Standards, and Procedures for IT. Including but not limited to drafting, updating, and maintaining in a central repository. 
6. Tracking and reporting of IT KRI’s.
7. Third party vendor onboarding IT risk assessments.
8. Maintain an annual calendar of risk and audit related initiatives to ensure adequate resource planning. 
9. Manage all IT aspects in the enterprise GRC tool.
10. Other duties as assigned by manager.

Knowledge, Skills and Experience Requirements:

1. Bachelor’s degree or equivalent experience
2. Minimum ten (10) years working in IT preferably withing financial serves
3. Thorough understanding of Risk Frameworks NIST, ISO, COBIT, etc.
4. Thorough understanding of ITIL.
5.  Strong technical acumen. 
6. Excellent written and verbal communication skills
7. Excellent planning skills with attention to detail
8. Proficient with the MS Office suite of tools (Excel, PowerPoint, Word)