The posting
Job Summary:
The IT Governance, Risk & Compliance Manager is a hands-on IT role responsible for assessing, developing, implementing, and monitoring technology governance, risk management, information security, and compliance processes for Global Outsources and Datapro Inc. The role translates information security standards and applicable banking and financial institution requirements into practical IT controls, documented procedures, and measurable remediation actions. The position supervises one direct report, with the primary emphasis on technical execution and process development.
Job Description:
Primary Duties & Responsibilities
- Perform day-to-day IT governance, risk, and compliance work for both entities, maintaining appropriate policies, control documentation, risk registers, and audit evidence for each organization.
- Develop, document, implement, and improve IT processes and controls in collaboration with IT operations, information security, and software development teams. Address access management, change management, secure software development, incident response, vulnerability management, backup and recovery, and business continuity.
- Maintain and improve the information security management system and supporting controls aligned with ISO/IEC 27001 and related ISO 27000 family standards; support gap assessments, internal audits, certification readiness, and ongoing compliance activities.
- Monitor applicable banking and financial services regulations and customer requirements, including FFIEC IT guidance relevant to technology service providers and requirements in jurisdictions served by the companies. Translate these requirements into actionable IT procedures and controls.
- Perform IT risk assessments and control reviews; conduct or coordinate vulnerability assessments and IT audits with technical teams, document findings, and track corrective actions through verified remediation.
- Maintain responsibility for the information security function, including the Corporate Information Security Officer duties assigned to this position, and work directly with technical teams to implement and monitor security controls.
- Review and update IT policies, standards, procedures, and process workflows as systems, risks, regulatory guidance, and business needs change.
- Coordinate responses to customer compliance questionnaires, due diligence requests, and internal or external audits; maintain accurate supporting evidence and follow up on findings.
- Partner with relevant business, legal, and compliance stakeholders to support applicable OFAC sanctions compliance requirements and related technology controls, where relevant to company operations and services.
- Coordinate IT compliance and process improvement projects, define deliverables and timelines, track dependencies, and communicate progress and unresolved risks.
- Provide practical training and guidance to employees on IT controls, information security, and compliance responsibilities.
- Supervise and develop one direct report, assign priorities, and review work quality while remaining directly involved in technical assessments, documentation, and implementation.
- Report compliance status, IT risks, control gaps, and remediation progress to management across both entities and recommend corrective actions.
- Perform other related duties as assigned by management.
Education
Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related discipline required. A degree in Business Administration or another related field may be considered when supported by substantial relevant technical IT experience.
Required experience and technical skills
- A minimum of five years of hands-on experience covering ISO/IEC 27001 compliance, IT governance, and banking or financial institution compliance and regulatory requirements, gained within financial institutions or technology service providers supporting them.
- Demonstrated experience developing, documenting, implementing, and improving IT processes, procedures, and controls; ability to translate compliance requirements into operational technical practices.
- Practical understanding of IT infrastructure, systems administration, access controls, change management, software development lifecycle processes, information security, vulnerability management, and incident response.
- Experience conducting IT risk assessments, evaluating controls, preparing audit evidence, and tracking remediation of compliance and security findings.
- Working knowledge of FFIEC IT guidance and applicable banking and financial services requirements relevant to technology service providers.
- Ability to work directly with IT operations and software development teams to assess processes and implement effective controls.
- Proficiency with Microsoft Office, particularly Excel, PowerPoint, and Outlook, and familiarity with Windows Server and Microsoft environments.
Preferred qualifications
- Experience with OFAC sanctions compliance and related systems or technology controls.
- Project management experience, particularly leading IT compliance, audit remediation, or process improvement projects; PMP certification is a plus.
- Relevant certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CISM, CRISC, or CISSP.
- Experience supervising or mentoring an employee and supporting compliance activities across multiple entities.
Personal skills
- Strong analytical, critical thinking, and problem-solving skills, with attention to detail and accuracy.
- Clear written and verbal communication; ability to explain technical risks and requirements to technical and business audiences.
- High ethical standards, sound judgment, and discretion when handling confidential information.
- Strong organization and follow-through; ability to prioritize competing requirements across two entities.
- Ability to work independently and collaboratively, with a practical approach to process improvement.
Worker Type:
Regular
Number of Openings Available:
1
