Job responsibilities:
- Partner with Technology Risk and Control leadership to define and implement the GRC strategy, set strategic priorities, and develop a prioritized GRC Book of Work, ensuring alignment with business objectives
- Drive the development and implementation of a comprehensive GRC End-to-End Operating Model to enhance service quality, efficiency, and customer satisfaction
- Develop and execute effective communication strategies and reporting mechanisms to ensure transparency and accountability in GRC activities
- Manage and facilitate organizational change to ensure successful implementation of GRC strategies and initiatives, focusing on change management planning and stakeholder engagement
Required qualifications, capabilities and skills:
- Formal training or equivalent expertise in a related field
- Strategic thinker with the ability to simplify complex matrices and ensure alignment with the vision
- Strong leadership skills with exceptional communication and presence, maintaining focus on end goals
- Skilled negotiator with the ability to collaborate with high-performing teams and individuals across the firm to achieve common goals
- Proficiency in information security domains, including policies and standards, risk and control assessments, and regulatory compliance
Preferred qualifications, capabilities and skills:
- Strong analytical skills, including solving and communicating complex problems, data analytics, and reporting to drive continuous improvement
- Advanced knowledge of project management practices and experience working across large environments
- Proven ability to apply critical thinking and structured problem-solving techniques to address issues and drive continuous improvement in risk management practices