IT Risk, Continuity and Compliance Manager

at  BMI Group

Empower, Connect, Evolve, and Inspire - these are the values that drive us and make BMI a company where you can thrive and grow.

JOB OVERVIEW

BMI is seeking a dynamic and experienced professional to join our organization as the IT Risk, Continuity, and Compliance Manager. This crucial role entails overseeing the IT Risk process, crafting IT continuity and disaster recovery plans, and managing IT Audit mitigation actions. Collaborating closely with cross-functional teams, you will identify, evaluate, and mitigate IT-related risks, while guiding the development and implementation of IT Continuity Plans to safeguard the integrity, security, and compliance of our IT systems and operations.
To excel in this role, you will need to possess a deep understanding of Risk Management frameworks and methodologies, as well as Business Continuity Management, specifically within Information Technology. Your extensive knowledge and experience will enable you to work with senior IT Professionals, Internal Governing Bodies, External Auditors, Regulatory Agencies, and our adept technical teams, to reduce risk and improve compliance standards.

KEY ACCOUNTABILITIES

Risk Management:

• Identify, assess, and prioritize IT-related risks, ensuring action plans are in place.
• Establish a comprehensive Risk database which can be used to manage, monitor and report on IT-related Risks.
• Conduct risk assessments of IT systems, processes, and infrastructure to identify vulnerabilities and potential threats.
• Generate and distribute regular risk reports to key stakeholders, providing insights into the current state of IT risk exposure, compliance status, and mitigation efforts.
• Ensure that risk reports are accurate, comprehensive, and actionable, highlighting significant findings and recommendations for risk reduction and improvement.
• Collaborate with stakeholders to review risk reports, discuss findings, and develop action plans to address identified issues and gaps.
• Continuously enhance risk reporting, processes, and methodologies to improve effectiveness and efficiency, incorporating feedback and lessons learned from previous reporting cycles.
• Develop IT risk and compliance training programs for employees, delivering awareness training and support to new and existing employees.
• Create and maintain an external network with other senior IT risk managers, and relevant risk forums.
• Stay informed about emerging IT risks, trends, and regulatory developments to proactively identify areas for improvement.

EXPERIENCE & SKILLS

• +5yrs experience in IT risk management, with proven experience in continuity, and audit management within a corporate environment.

  Strong knowledge of Technology Risk & Control frameworks and assessment methodologies Relevant professional certifications, such as; COBIT, CRISC, etc.

• Knowledge of internal and/or external IT regulatory policies, standards, procedures, and controls.

• Desirable: Knowledge / experience of; Smartsheets, Google Workplace, ServiceNow, SNOW Asset Management.

Please refer the Job description for details