Senior IT Governance, Risk & Compliance Manager

Senior IT Governance, Risk & Compliance (GRC) Manager

 

 

Location: Home based, in the US

 

 

Position Summary

 

The Senior IT GRC Manager is responsible for overseeing and managing the Global IT GRC program and ensuring the Company adheres to the relevant laws, regulations, standards, and policies. The Senior IT GRC Manager will also oversee and coordinate IT audits, assessments, and remediation activities, as well as provide guidance and support to the Global IT GRC Team and leadership on compliance-related matters supporting corporate priorities.

The Senior IT GRC Manager will also oversee IT audits, assessments, and remediation activities, which are directly being managed and coordinated by the Global IT GRC Team. This role will also provide guidance and support to the Global IT GRC Team and leadership on compliance-related matters supporting corporate priorities.

 

Key Responsibilities

 

• Develop, implement, and maintain the IT compliance framework, policies, procedures, and controls.
• Monitor and report on the status and effectiveness of the IT compliance program and identify areas for improvement using quantitative data analysis and metrics.
• Aggregate information from multiple sources, organize and distill into a digestible format utilized to positively impact business outcomes.
• Oversee and facilitate internal and external IT audits, assessments, and reviews, and ensure timely and accurate responses and remediation plans.
• Provide training and awareness for IT compliance requirements and best practices to the IT staff and other stakeholders.
• Manage and supervise the Global IT GRC Team and provide coaching and feedback.
• Collaborate with the IT leadership, legal, risk, and other functions to ensure alignment and integration of the IT compliance program with the overall business objectives and strategies.
• Stay abreast of the latest IT compliance trends, regulations, standards, and best practices, and advise the IT leadership on the implications and actions needed.

 

Qualifications and Skills

 

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• Minimum of 8 years of experience in IT compliance, audit, or risk management, preferably in a large and complex organization.
• Strong knowledge and understanding of IT compliance frameworks, standards, and regulations, such as ISO 27001, COBIT, NIST, PCI-DSS, GDPR, etc.
• Professional certification in IT compliance, audit, or risk management, such as CISA, CISM, CRISC, CGEIT, etc.
• Excellent communication, presentation, and interpersonal skills, with the ability to communicate complex and technical issues to various audiences.
• Strong analytical, problem-solving, and decision-making skills, with the ability to evaluate and manage IT compliance risks and issues.
• Highly organized, detail-oriented, and self-motivated, with the ability to manage multiple projects and priorities in a fast-paced environment.
• Demonstrated leadership, management, and coaching skills, with the ability to lead and motivate a team of IT compliance professionals.
• This position does not require travel.
• Requires sitting or standing at will while performing work on a computer (or any other physical requirements).

 

 

What We Offer:

 

• A great Team and culture – please see our recruitment video.
• An exciting career as an integral part of a world-leading software company providing solutions for architecture, engineering, and construction.
• Competitive Salary and benefits.
• The opportunity to work within a global and diversely international team
• A supportive and collaborative environment.
• Colleague Recognition Awards.

 

 

 

About Bentley Systems:

 

Bentley Systems (Nasdaq: BSY) is the infrastructure engineering software company. We provide innovative software to advance the world’s infrastructure – sustaining both the global economy and environment. Our industry-leading software solutions are used by professionals, and organizations of every size, for the design, construction, and operations of roads and bridges, rail and transit, water and wastewater, public works and utilities, buildings and campuses, mining, and industrial facilities. Our offerings, powered by the iTwin Platform for infrastructure digital twins, include MicroStation and Bentley Open applications for modeling and simulation, Seequent’s software for geoprofessionals, and Bentley Infrastructure Cloud encompassing Project