Key Responsibilities:Operationalise and mature the Technology GRC framework in line with organisational strategy, risk appetite, regulatory expectations, and recognised standards.
Drive adoption of standardised Technology governance, risk, control, compliance, and remediation practices across Technology teams.
Act as the Technology GRC business product owner and operational lead for ServiceNow GRC/IRM, including workflows, data structures, roles, dashboards, controls, reporting, and user adoption.
Maintain and prioritise the ServiceNow GRC/IRM enhancement backlog and coordinate requirements, testing, implementation, adoption, and continuous improvement.
Drive the transition from fragmented manual trackers to controlled ServiceNow GRC workflows and a reliable single source of truth.
Monitor platform adoption, workflow performance, data quality, and compliance with required GRC processes.
Support Technology risk identification, assessment, treatment, review, acceptance, and escalation, ensuring risks are accurately maintained and monitored.
Maintain traceability between risks, controls, findings, obligations, issues, actions, and remediation plans.
Support the mapping and maintenance of Technology control frameworks against relevant standards, including ISO 27001, ISO 20000, COBIT, and other applicable requirements.
Coordinate control monitoring, evidence collection, control reviews, and remediation activities for key Technology controls.
Maintain central visibility of Technology risks, audit findings, compliance obligations, issues, management actions, and remediation plans.
Drive remediation actions through to closure by managing stakeholders, dependencies, blockers, escalation, and closure evidence.
Identify overdue, stalled, or repeatedly followed-up items and ensure accountable owners maintain realistic remediation plans.
Identify manual or inefficient GRC activities and implement workflow automation, process simplification, and continuous improvement initiatives.
Establish and monitor GRC data standards covering accuracy, completeness, timeliness, consistency, ownership, and traceability.
Develop operational dashboards and KPIs covering Technology risk, control effectiveness, action closure, overdue items, data quality, process adoption, workflow performance, and automation progress.
Coordinate operational activities supporting audits, certifications, compliance reviews, governance forums, and regulatory initiatives while maintaining structured evidence and action repositories.
Develop and maintain Technology GRC procedures, playbooks, workflows, templates, governance records, and accountability mechanisms.
Provide practical guidance and training to Technology stakeholders to improve GRC process and platform adoption.
Work closely with Technology risk, compliance, audit, security, and other relevant stakeholders to establish clear ownership and avoid duplication across GRC activities.
Responsibilities
Key Responsibilities:Operationalise and mature the Technology GRC framework in line with organisational strategy, risk appetite, regulatory expectations, and recognised standards.
Drive adoption of standardised Technology governance, risk, control, compliance, and remediation practices across Technology teams.
Act as the Technology GRC business product owner and operational lead for ServiceNow GRC/IRM, including workflows, data structures, roles, dashboards, controls, reporting, and user adoption.
Maintain and prioritise the ServiceNow GRC/IRM enhancement backlog and coordinate requirements, testing, implementation, adoption, and continuous improvement.
Drive the transition from fragmented manual trackers to controlled ServiceNow GRC workflows and a reliable single source of truth.
Monitor platform adoption, workflow performance, data quality, and compliance with required GRC processes.
Support Technology risk identification, assessment, treatment, review, acceptance, and escalation, ensuring risks are accurately maintained and monitored.
Maintain traceability between risks, controls, findings, obligations, issues, actions, and remediation plans.
Support the mapping and maintenance of Technology control frameworks against relevant standards, including ISO 27001, ISO 20000, COBIT, and other applicable requirements.
Coordinate control monitoring, evidence collection, control reviews, and remediation activities for key Technology controls.
Maintain central visibility of Technology risks, audit findings, compliance obligations, issues, management actions, and remediation plans.
Drive remediation actions through to closure by managing stakeholders, dependencies, blockers, escalation, and closure evidence.
Identify overdue, stalled, or repeatedly followed-up items and ensure accountable owners maintain realistic remediation plans.
Identify manual or inefficient GRC activities and implement workflow automation, process simplification, and continuous improvement initiatives.
Establish and monitor GRC data standards covering accuracy, completeness, timeliness, consistency, ownership, and traceability.
Develop operational dashboards and KPIs covering Technology risk, control effectiveness, action closure, overdue items, data quality, process adoption, workflow performance, and automation progress.
Coordinate operational activities supporting audits, certifications, compliance reviews, governance forums, and regulatory initiatives while maintaining structured evidence and action repositories.
Develop and maintain Technology GRC procedures, playbooks, workflows, templates, governance records, and accountability mechanisms.
Provide practical guidance and training to Technology stakeholders to improve GRC process and platform adoption.
Work closely with Technology risk, compliance, audit, security, and other relevant stakeholders to establish clear ownership and avoid duplication across GRC activities.
Linked-in
Google