Governance Risk and Compliance

Establish standard repeatable practices to maintain a balanced security and compliance control framework that meets necessary regulatory and contractual requirements. Ensure that necessary security due diligence of our vendor portfolio is maintained. Act as the focal point for external auditor activity/assessments; driving accountability and efficiency across teams. Influence and contribute to the policies, standards, and controls to drive efficient compliance controls. Facilitates the processes necessary to ensure that we have effective business continuity to overcome physical, operational, or technology disruptions. Partner with Human Resources, Legal, and Finance teams to ensure appropriate operational, technical, data privacy, and SOD controls are implemented and enforced. Ensure compliance with society, regulatory, and industry standards for security and compliance. Complete new hire orientation, gaining the resources you need to be successful. Acclimate to team and company norms, business objectives, and Organization values. Develop basic understanding of business functions, applications, tech stack, and development process. Understand our existing security governance practices, frameworks, and tools. Conduct initial interview with stakeholders to understand risk areas. Update our security risk register reflecting learnings and opportunities identified. Identify preferred tooling to facilitate an effective GRC program. Enhance our existing controls framework. Revise third-party risk review process and ongoing monitoring program. Participate in external security reviews and/or audits. Update our Business Impact Analysis and document business continuity plans. Design and implement process improvements that positively impacts the team and our overall security posture. Mentor others, playing an active role in elevating the skill sets of those you work with Rollout security compliance training to the organization and lead training for ongoing awareness. Guide the team's work so that it fits into the larger team and engineering group objectives. Improve security in core systems, applications, and operations managed by the team and contribute to engineering group objectives. Continuously evaluate the organization's existing security and compliance practices, define and measure security-related activities, and demonstrating concrete improvements to the application assurance program within the organization Plan and facilitate testing of our business continuity, incident response, and disaster recovery plans with appropriate business and technology stakeholders. Business continuity plans after the risk assessments Non-operational Business Continuity Plans (BCPs), RPO & RTO The team should have dotted line Relationship with RMD to assess and mitigate the risks. A monthly reporting format to RMD should be designed by involvement of both RMD and IT

Preferred candidate profile GRC

Perks and benefits