GRC Manager

The  IT Risk and Compliance Lead is a key part of the team ensuring that IT have consistent global policies, processes and standards in place and details include people, process, and technology.

Responsible for assurance through analysing the current state of IT and recommending opportunities for risk reduction and resource optimisation.

The focus of the position is to ensure projects implement adequate and appropriate processes (including but not limited to documentation) to meet our business and external compliance needs.

KEY ACCOUNTABILITIES & RESPONSIBILITIES

• Implement and evolve checklists and blueprint to embed in the Information security framework aligned to ISO27001
• Support the delivery of value creation and greater efficiency through the simplification by elimination of unnecessary complexity within business processes as well as identification and adoption of better ways of working
• Drive process change using techniques such as reporting, document analysis, requirements workshops, surveys, business process descriptions, business analysis and workflow analysis
• Plan, design, research, write and edit a range of documents, including policies, procedures, user guides and manuals, technical specifications, training materials, and proposals
• Analyse IT risks and project requirements to propose enablers to process, people and technology, where required re-engineering processes to achieve efficiencies
• Design and manage the IT document management procedure including implementing automated workflow for review and approval stages for both knowledge base and company policy and procedures documentation
• Support alignment of external and internal documentation in adherence to contractual terms and conditions
• Liaise with accountable and responsible parties to define identify and establish governance needs for IT
• Determine types of documents needed - to be understood by both technical and non-technical stakeholders[DMS1]
• Collaborate with technical resources to collect and interpret technical information[DMS2]