About the job
Position OverviewThe role consists of working to assess current-state practices, identify control and process gaps, design and implement control instances, define supporting procedures and evidence, establish effective metrics, and drive remediation through closure. The successful candidate will be a pragmatic self-starter who can navigate ambiguity, challenge constructively, and build productive working relationships with demanding clients and stakeholders across technology, operations, risk, compliance, audit and governance functions.
- Key ResponsibilitiesAct as the senior ITAM risk, process and operations subject-matter expert, providing practical guidance on asset inventory, lifecycle management, software asset management, hardware asset management, cloud assets, configuration data, ownership, reconciliation, data quality, end-of-life management and asset disposition.
- Assess ITAM risks and control gaps across the end-to-end asset lifecycle, including onboarding, classification, inventory recording, discovery, reconciliation, maintenance, transfer, retirement and disposal.
- Translate identified risks, policy requirements and operational obligations into well-designed control objectives, control requirements and control instances with clear scope, ownership, frequency, system applicability, evidence, escalation and remediation expectations.
- Design or enhance control instances so they are specific, measurable, sustainable, aligned to actual operating practices, and capable of independent testing.
- Develop and maintain operating procedures, process flows, RACI models, control narratives, evidence standards, exception-handling procedures and governance documentation.
- Lead current-state assessments and root-cause analysis; identify gaps, overlaps, unclear accountability and ineffective handoffs; recommend practical target-state solutions.
- Partner with asset owners, technology teams and process owners to implement controls and embed them into business-as-usual workflows, tooling and governance routines.
- Define key risk indicators, key control indicators, operational metrics, thresholds and management reporting to monitor asset data quality, control performance, exceptions and remediation progress.
- Review the completeness, accuracy and timeliness of IT asset and configuration data; work with accountable teams to investigate discrepancies and drive corrective action.
- Provide credible challenge to control owners and stakeholders while balancing risk reduction, operational feasibility, implementation effort and business priorities.
- Prepare concise, executive-ready materials for governance forums, risk committees, auditors, regulators and senior management.
- Support risk and control self-assessments, audits, regulatory reviews, control testing, issues management and remediation validation by providing clear documentation and defensible evidence.
- Monitor relevant ITAM industry practices, standards and technology trends, and incorporate applicable insights into the control framework and operating model.
- Independently plan and deliver multiple workstreams, manage dependencies, raise risks early and maintain momentum without requiring close supervision.
- Build trusted relationships and manage challenging interactions professionally, including situations involving conflicting priorities, resistance to change or unclear ownership.