Conduct proactive risk assessments across business and IT initiatives, including cloud migrations, system implementation, automation rollouts, process transformation, and AI use cases
Design and evaluate end-to-end business systems architecture and processes to identify and manage SOX, operational, and other compliance domain risks
Assess and analyze current processes, controls, and systems to identify optimization opportunities and manage the implementation of corrective actions for compliance deficiencies
Support the development of risk scenarios and impact/likelihood models to assess level of risk and anticipate potential control failures
Assist in modernizing the control environment by helping transition from manual controls to automated and embedded processes
Design and build technology and business controls to mitigate risks leveraging GRC systems and standards
Collaborate with IT, Compliance, and Business partners to ensure controls are scalable, efficient, and aligned to enterprise risk appetite
Manage the end-to-end risk program for IT projects to identify risk and control requirements, and operationalize these changes
Develop and maintain reporting and dashboards on key risk indicators, control health, and mitigation progress across domains
Support audit readiness by ensuring documentation, evidence, and process narratives are complete and accessible
Requirements
Bachelor's Degree in IT Risk Management, Information Systems, Business or a related field plus 4 years of related work experience OR a combination of education and experience deemed equivalent
4-7 years of IT risk management, IT compliance, enterprise risk, audit, or similar roles
Working knowledge of risk and control frameworks (SOX, NIST, ISO 27001, COSO, COBIT)
Familiarity with automation, AI governance concepts, cloud-based risk considerations, and Agile scrum methodology
Strong analytical, documentation, and problem-solving skills
Effective communicator with the ability to partner across business and technical teams.