IT Governance Risk and Compliance Specialist

Find purpose in each day while contributing to a workplace revolution!
SHL, People Science. People Answers.

Are you willing to embark on a transformation journey, delivering infrastructure and associated technologies while providing efficiencies to the workforce? If yes, we invite you to apply for this fantastic opportunity at SHL. We are seeking an IT Governance Risk and Compliance Specialist in our Legal function. The IT Governance Risk and Compliance Specialist is accountable for ensuring SHL IT GRC is maintained and continually improved.

An excellent benefits package is offered in a culture where career development, with ongoing manager guidance, collaboration, flexibility, diversity, and inclusivity are all intrinsic to our culture.  There is a huge investment in SHL currently so theres no better time to become a part of something transformational.

What you will be doing:

• Maintain IT GRC environment to include implementation across a security & data protection control framework
• Perform Risk Assessments (RA) and maintain the IT risk register
• Oversee internal and external SOC2 Type II/ ISO Audits
• Attend to bids, questionnaires, RFP/RFI, and security questionnaires from SHL clients within agreed SLAs
• Ensure continuous improvement, continuous monitoring, and nonconformance & corrective action processes to constantly mature the GRC foundation
• Guide and measure ISMS objectives and associated metrics, dashboards, & reports

What we are looking for from you:

Essential: 

• Auditing in a cloud environment with development and operational services
• Business insight with strong written and verbal communication
• Self-motivation with a history of on-time delivery of tasks and projects

Desirable:

• IT auditing for at least one of SOC2 Type II, ISO 27001, ISO 22301, ISO 27701 and ISO 27018, Cloud Security Alliance Cloud Control Matrix
• Industry qualifications such as CISSP, CISA, CISM, CRISC certifications
• Third Party Management processes, reviewing security & data protection programs