Compliance

• Conduct comprehensive security risk assessments for new and existing services, applications, technologies, and vendors.
• Clearly document and communicate findings to relevant stakeholders.
• Provide expert consultative advice to Information Services (IS) and business units to support informed risk management decisions.
• Recommend and implement appropriate controls to address identified security risks and enhance organizational security.
• Identify opportunities to improve processes for security risk identification and management.
• Design, operate, and manage a compliance framework aligned with ISO 27001, including associated controls.
• Develop and maintain information security governance documentation, including policies, standards, procedures, and guidelines.
• Collaborate with Internal Audit, Legal, Privacy, and other stakeholders to ensure IS policies and controls meet all regulatory and organizational requirements.
• Facilitate audits and risk reviews with internal/external auditors, clients, and business teams; ensure timely response and track remediation to closure.
• Monitor the effectiveness of security controls through the design and implementation of KPIs and KRIs for reporting.
• Prepare periodic reports and presentations for senior management, steering committees, and the board of directors.
• Assess security controls of vendors and third parties safeguarding company assets through contract and compliance reviews.
• Conduct monthly compliance reviews with security service providers to ensure adherence to SLAs and contractual requirements.
• Provide backup support for other security team members as needed.

Senior Analyst, Governance, Risk, and Compliance

Compliance Officer – Testing

Manager, Compliance – Regulatory Complaints

Associate Director, Compliance Projects – Advisory