ICT Risk & Compliance Manager at SevenSeas Technologies Group

ICT Risk and Compliance Manager is responsible to maintain the IT Risk Framework and its associated controls and reporting. This role is responsible to evaluate overall information technology risk, maintain an active view, and report on the actual, mitigated and residual risk in the technology organization.

Job Responsibilities

• Identify, assess and evaluate risk to enable the execution of the risk management strategy.
• Risk Response: Develop and implement risk responses to ensure that risk factors are addressed in a cost-effective manner and in line with business objectives.
• Risk Monitoring: Monitor risk and communicate information to the relevant stakeholders to ensure the continued effectiveness of the enterprise’s risk management strategy.
• Design and implement information systems controls in alignment with the organization’s risk appetite and tolerance levels to support business objectives.
• Monitor and maintain information systems controls to ensure they function effectively and efficiently.
• Coordinate the development and ongoing maintenance of other IT policies and procedures.
• Ensure that all IT policies and procedures are compliant with regulatory requirements.
• Maintain the Information Disaster Recovery Plan including annual reviews
• Keep informed regarding pending industry changes, trends, and best practices and assess the potential impact of these changes on organizational processes.
• Design or implement improvements in communication, monitoring, or enforcement of compliance standards.

Qualifications

• Bachelor of Commerce degree in auditing and equivalent.
• 3-4 years auditing experience as a compliance manager, information risk specialist, or information technology auditor.
• 2-3 years management experience in information technology functions.
• Experience in healthcare industry is preferred
• CRISC Certification is preferred
• Familiarity with Microsoft Office products including Word, Advanced Excel, Access, PowerPoint
• Report writing skills are required, Must be able to summarize and communicate technical data to a non-technical audience.