Security Governance, Risk and Compance Manager

Posted 1d Leaves the board in 7 days
ATS Keyword Match See which key terms from this posting your resume already has. Free.

Location: McLean, Virginia (Remote)
Pay Rate: $65-$69.60
 

Responsibilities:
  • Provide audit support for teams undergoing audits. 
  • Manage the end-to-end process for teams being audited, e.g. translate audit requests, collect and review audit evidence, hold consultation with auditees, coordinate with auditors, refute potential audit findings as needed & translate potential audit findings to leadership, etc.
  • Develop and document plan of action and milestones to successfully remediate internal audit findings.
  • Forge and nurture strong, trust-based relationships with auditors and business stakeholders to foster a collaborative and transparent audit process built on proactive communication and mutual understanding.
  • Provide issue management expertise to an issue management team for issues generated from audits.
  • Oversee work products, manage deliverable deadlines and expectations, supervise junior staff, and provide coaching, mentoring, and feedback.
     
Qualifications:
  • Bachelor's degree with five years of IT Audit or Internal Audit experience within a large professional services environment specializing in IT assurance.
  • Experience in creating and reviewing IT Audit or Internal Audit workpapers.
  • Demonstrated expertise in managing the complete issue lifecycle, using strong analytical and stakeholder management skills to successfully mitigate the identified risk/issue.
  • Proven experience analyzing, interpreting, and assessing IT and security policies to evaluate compliance with policies.
  • Strong verbal/written communication, ability to communicate information clearly and efficiently to senior leadership, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork.
  • Experience providing audit support to auditees preferred. Relevant industry certifications, e.g. CRISC, CISA, CISSP, preferred.