Serves as the client-facing IT risk and governance lead for control-testing automation. Leads discovery sessions, maps controls to source data, identifies gaps and dependencies, defines thresholds, prioritizes implementation, and translates regulatory requirements into testable control logic with technical teams. Reviews solution designs, supports risk and audit requirements, and prepares implementation documentation. Requires extensive experience with IT risk, GRC, SOX ITGC, NYDFS, access controls, vulnerability management, asset management, Azure, and data mapping.
We are looking for an experienced IT Risk and Governance professional who can work as the onshore delivery anchor for a large-scale control testing automation programme. The role will involve working closely with client Risk, Compliance, and Internal Audit teams, understanding the control requirements, mapping them to data, and working with the technical team to translate the requirements into testable controls.
Key Responsibilities
1) Act as the onshore point of contact for client Risk and Governance stakeholders.
2) Lead discovery sessions and walkthroughs with client SMEs.
3) Identify source systems and understand the controls and data available in each system.
4) Define control-to-data requirements and source-to-target mappings.
5) Identify data gaps, access issues, and dependencies during discovery.
6) Work with client stakeholders to define control thresholds and evaluation criteria.
7) Help prioritize control domains and define the implementation sequence.
8) Work with the technical team to translate control requirements into testable control logic.
9) Review the solution design to ensure it aligns with regulatory and business requirements.
10) Prepare discovery and implementation documentation.
Required Skills & Experience
1) 10+ years of experience in IT Risk & Governance, Information Security Controls, or GRC.
2) Strong knowledge of SOX ITGC, NYDFS, or similar regulatory frameworks.
3) Good understanding of Vulnerability Management, Logical Access Controls (PAM/IAM), and Asset Management.
4) Experience working with control testing, risk assessment, and audit requirements.
5) Ability to understand regulatory requirements and convert them into practical control requirements.
6) Experience working with data teams on data mapping, data requirements, and control automation.
7) Working knowledge of Azure and enterprise data warehouse concepts.
8) Familiarity with ITSM, Identity Governance, Vulnerability Management, and PAM tools.
9)Strong client-facing and stakeholder management skills.
10) Good communication and documentation skills.
11) Consulting or vendor-side delivery experience is preferred.
Similar Jobs
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Leads the Americas ITAM and ITOM services practice, setting strategy, market positioning, business plans, and revenue objectives. Oversees senior consultants and business process consultants, delivery quality, customer transformation roadmaps, executive relationships, partner ecosystems, and cross-functional initiatives. Drives customer value, operational excellence, thought leadership, practice growth, and adoption of AI-powered ServiceNow capabilities. Travel is required up to 40% annually.
Top Skills:
Cis-HamCis-ItamCis-ItomCis-SamCloud ComputingIt Asset Management (Itam)It Operations Management (Itom)It Service Management (Itsm)SaaSServicenow
Financial Services
Leads a multi-year transformation of marketing content supply chain operations across Workfront, AEM Assets, DAM, and related Adobe tools. Defines strategy, roadmaps, workflows, governance, KPIs, AI and automation use cases, platform integrations, and operating model changes. Manages vendors, risks, dependencies, change management, and a team of marketing operations professionals while driving adoption, content delivery, efficiency, and measurable business value.
Top Skills:
Adobe Content HubAdobe Creative CloudAdobe Dynamic MediaAdobe Experience Manager (Aem)Adobe ExpressAdobe GenstudioAdobe WorkfrontAem AssetsAi AutomationDigital Asset Management (Dam)Frame.IoMarketing Technology Platforms
Financial Services
Designs, operates, and improves secure AWS cloud environments and ECS application platforms supporting data-driven applications. Builds and administers CI/CD pipelines using Jenkins and Spinnaker, improves reliability and scalability, supports Kafka and SQL dependencies, and partners with globally distributed Agile teams. The role also involves mentoring engineers, establishing reusable deployment standards, and driving operational excellence across Java/Spring Boot microservices and React micro frontends.
Top Skills:
Amazon EcsAWSJavaJenkinsKafkaPythonReactSpinnakerSpring BootSQL
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
