Head, Governance Risk & Compliance at Willers Solutions

Our client; a reputable firm in the TECH sector is looking to fill the role of a HEAD, GOVERNACE RISK & COMPLIANCE.

RESPONSIBILITIES

• Build and lead the GRC Function (recruit and manage the team members);
• Build and lead the Internal/M&A Audit function (recruit and manage the team members);
• Review new regulations for security impact and document requirements for compliance;
• Communicate requirements and compliance status to leadership and impacted Product & Tech teams;
• Identify and document cyber risks and manage mitigation and follow up on open security risks. Report issues to stakeholders;
• Develop and lead strategies for the governance, risk and compliance functions across the company that support transformation of the security function;
• Develop, maintain and communicate corporate Security policies, standards, procedures, and guidelines and ensure IT compliance programs are both established and followed (KRIs);
• Perform and help in leading Third-Party risk assessments on new and existing partners and suppliers;
• Provide reports and metrics of the current state and improvements of the security of the group. 
• Manage and maintain the development roadmap for the Enterprise GRC 
• Work with development to execute on roadmap items on time 
• Drive strategic innovation to generate new product ideas 
• Collaborate with Marketing, Sales, Partners and Professional Services to drive market traction

REQUIRMENT 

• 13 years of experience in Information Security - security governance, regulatory governance and/or IT audit preferred. 
• Several years of managerial experience with proven track records in building and leading strong international teams. 
• Global knowledge of cloud environments and associated constraints, especially on AWS and GCP; 
• Relevant industry standard certifications preferred (i.e., CISA, CISM, CISSP, SANS Institute/GIAC, PCIP); 
• Fluency in English is mandatory for this position. 
• Strong understanding of compliance & regulatory industries and their effects on company stored data 
• Expertise in GRC engagements with a focus on compliance and audits 
• Ability to effectively communicate our solution’s value with experience, industry verified information, and regulatory references
• Understanding of analytical tools (Tableau, Power BI, etc.) and integration with them 
• Technical experience with (or ability to quickly learn applicable areas of): Windows Active Directory, Microsoft 365, Outlook, Exchange, Cloud Hosted Platforms (AWS, Azure, GCP)Lotus Notes,GSuite (Google Drive & Google Mail).
• Competent to solve business problems and actively engage with stakeholders and customers to understand the real problem.
• Should be skilled at building strong partnerships and collaborate with various stakeholders including design lead, architects, and developers 
• Play the product owner role by detailing out the user stories and create wireframes designs 
• Strong analytical and communication skills 
• A strong understanding of security frameworks, standards and where and when to apply them; 
• Ability to integrate technical data into executive reports; 
• Dedicated to delivering results and meeting deadlines; 
• Able to see the big picture and create strategic plans to execute against it;