grc manager

Pennell Hart

<div>
 <p>
  Pennell Hart are a Legal &amp; Compliance Executive Search firm based in the UAE. We have been instructed by a number of our clients to identify exceptional senior GRC leaders for a number of high-profile institutions across the UAE. Our clients include top-tier hedge funds, asset managers, investment banks, and alternative investment companies seeking proven leaders to own and elevate their risk and compliance frameworks.
 </p>
 <p>
  <br/>
 </p>
 <p>
  As Head of GRC, you will serve as the most senior governance, risk, and compliance professional within the organisation and will act as a strategic partner to the C-suite and board whilst establishing a culture of risk awareness and regulatory excellence. You will own the enterprise-wide GRC framework, drive regulatory relationships, and ensure the firm operates within all it's applicable local and international regulatory obligations.
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   12+ years in GRC, risk, or compliance within financial services
  </li>
  <li>
   Senior leadership background at a hedge fund, asset manager, investment bank, or institutional investor
  </li>
  <li>
   Track record building or transforming GRC functions
  </li>
  <li>
   Strong knowledge of international standards
  </li>
  <li>
   Relevant professional qualification: ICA, ACAMS, CFA, or legal background
  </li>
  <li>
   Exceptional stakeholder and board-level communication skills
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Apply now for immediate consideration for multiple mandates.
 </p>
</div>


Head of Governance, Risk & Compliance

Systems Limited

<div>
 <p>
  The
  <strong>
   Information Security Risk Management &amp; Reporting Manager
  </strong>
  supports the development and execution of the bank&rsquo;s information security risk management strategy. The role ensures cyber and information security risks are effectively identified, assessed, monitored, and reported in alignment with enterprise risk frameworks and business objectives. The position also drives automation and optimization of security risk processes through Governance, Risk, and Compliance (GRC) platforms, enabling centralized risk visibility, streamlined reporting, and stronger governance across the organization.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Define and manage the
   <strong>
    information security risk lifecycle
   </strong>
   in alignment with Enterprise Risk Management (ERM) and Operational Risk Management (ORM) frameworks.
  </li>
  <li>
   Support business and technology teams in
   <strong>
    risk-based decision making
   </strong>
   related to cyber and information security.
  </li>
  <li>
   Develop and implement
   <strong>
    risk appetite and risk management frameworks
   </strong>
   in collaboration with ERM and ORM teams.
  </li>
  <li>
   Ensure
   <strong>
    information security exceptions
   </strong>
   are documented, assessed, approved by risk owners, and tracked until closure.
  </li>
  <li>
   Identify, assess, and monitor
   <strong>
    cyber risks
   </strong>
   , ensuring effective documentation, reporting, and remediation tracking.
  </li>
  <li>
   Conduct
   <strong>
    cyber risk quantification
   </strong>
   to evaluate potential business impact using qualitative or quantitative methods.
  </li>
  <li>
   Develop and maintain a
   <strong>
    centralized cyber risk register
   </strong>
   to track risk status, remediation progress, and emerging threats.
  </li>
  <li>
   Promote adoption of
   <strong>
    cybersecurity best practices
   </strong>
   across teams and business units.
  </li>
  <li>
   Act as the
   <strong>
    business owner of the Information Security GRC platform
   </strong>
   , ensuring its effective use for governance, risk, and compliance activities.
  </li>
  <li>
   Enable
   <strong>
    automation of information security processes
   </strong>
   through GRC solutions, including dashboards, risk registers, and reporting capabilities.
  </li>
  <li>
   Manage relationships with
   <strong>
    GRC solution vendors
   </strong>
   , including requirements, licensing, contracts, and renewals.
  </li>
  <li>
   Ensure GRC tools are
   <strong>
    configured and integrated
   </strong>
   to meet the organization&rsquo;s risk, compliance, and audit requirements.
  </li>
  <li>
   Monitor
   <strong>
    GRC platform performance
   </strong>
   , resolve issues, and ensure continuous system availability and usability.
  </li>
  <li>
   Develop
   <strong>
    training and guidance
   </strong>
   to support GRC platform adoption across the organization.
  </li>
  <li>
   Support
   <strong>
    CISOs and information security teams
   </strong>
   in regulatory audits, assessments, and reporting.
  </li>
  <li>
   Manage
   <strong>
    GRC Run-the-Bank and Change-the-Bank initiatives
   </strong>
   , ensuring timely delivery and proactive risk escalation.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    10+ years of experience
   </strong>
   in Information Security or Cyber Security, including
   <strong>
    2&ndash;3 years managing GRC platforms or similar governance roles
   </strong>
   .
  </li>
  <li>
   Strong experience in
   <strong>
    information security governance, risk management, compliance, and cyber risk frameworks
   </strong>
   .
  </li>
  <li>
   Hands-on experience with
   <strong>
    GRC platforms
   </strong>
   such as RSA Archer, MetricStream, or similar solutions.
  </li>
  <li>
   Strong understanding of
   <strong>
    banking security frameworks and standards
   </strong>
   such as ISO 27001, NIST 800 series, PCI-DSS, SWIFT CSP, and COBIT.
  </li>
  <li>
   Experience in
   <strong>
    risk assessments, cyber risk quantification, and risk reporting
   </strong>
   in enterprise environments.
  </li>
  <li>
   Ability to interpret
   <strong>
    regulatory requirements
   </strong>
   and translate them into security controls and risk mitigation strategies.
  </li>
  <li>
   Strong
   <strong>
    analytical, stakeholder management, and communication skills
   </strong>
   , with experience working with senior leadership.
  </li>
  <li>
   Experience managing
   <strong>
    enterprise security initiatives and cross-functional projects
   </strong>
   .
  </li>
  <li>
   <strong>
    Master&rsquo;s degree
   </strong>
   in Information Technology, Information Security, or a related field.
  </li>
  <li>
   Professional certifications such as
   <strong>
    CISA, CISM, CISSP, CRISC, or ISO 27001 LA/LI
   </strong>
   preferred.
  </li>
 </ul>
 <p>
 </p>
</div>


Information Security Risk & Reporting Manager

Agthia Group PJSC

<div>
 <p>
  <strong>
   Role Purpose:
  </strong>
 </p>
 <p>
  The Manager of Governance, Risk &amp; Compliance is a compliance specialist responsible for executing and maintaining the company&rsquo;s compliance, investigations, and resilience programs across assigned markets. Drawing on a Big Four advisory background, the role delivers hands-on expertise across Regulatory Compliance Management, Data Privacy, Whistleblower and Investigations, Sanctions Screening, and Training and Internal Communications.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Accountabilities:
  </strong>
 </p>
 <ul>
  <li>
   Manage the regulatory compliance calendar, tracking obligations across Egyptian, UAE, and GCC jurisdictions and ensuring timely fulfilment of all requirements.
  </li>
  <li>
   Conduct compliance gap assessments and provide structured remediation recommendations to business units, monitoring closure of findings.
  </li>
  <li>
   Conduct Privacy Impact Assessments (PIAs) for new initiatives and manage data subject rights requests and breach response procedures.
  </li>
  <li>
   Manage the whistleblower reporting channel, triaging incoming reports and conducting or coordinating internal investigations into ethics, misconduct, fraud, and compliance breaches.
  </li>
  <li>
   Conduct interviews, evidence gathering, and root-cause analysis, maintaining secure and auditable case files suitable for internal audit or regulatory review.
  </li>
  <li>
   Prepare investigation reports and recommendations, tracking corrective action implementation to closure.
  </li>
  <li>
   Promote a speak-up culture through targeted awareness and anti-retaliation initiatives across assigned markets.
  </li>
  <li>
   Implement case management dashboards and analytics to identify recurring themes and emerging risk patterns.
  </li>
  <li>
   Investigate and escalate potential sanctions matches in line with defined escalation protocols, maintaining complete and auditable screening records.
  </li>
  <li>
   Design and deliver GRC training programs covering compliance, data privacy, whistleblowing, BCP, and sanctions awareness for employees at all levels.
  </li>
  <li>
   Develop and execute the internal GRC communications plan, producing awareness materials and campaigns tailored to different employee audiences.
  </li>
  <li>
   Track mandatory training completion and report on GRC culture indicators to the Senior Manager of GRC.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications &amp; Experience:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree required, advanced degree in Law, Business, or related field preferred.
  </li>
  <li>
   Professional certifications such as CCEP, CFE, CIPP/E, CIA, or CAMS are advantageous.
  </li>
  <li>
   6&ndash;8 years of experience in compliance, investigations, or risk management, with a strong preference for Big Four professional services background (advisory, forensics, or risk consulting).
  </li>
  <li>
   Demonstrated experience in regulatory compliance, data privacy, sanctions screening, and internal investigations across Egyptian and/or GCC regulatory frameworks.
  </li>
  <li>
   Proven experience managing whistleblower case management and preparing compliance reports for Egyptian regulatory authorities (FRA, CBE, EFSA).
  </li>
 </ul>
</div>


Governance, Risk & Compliance Manager

RATP Dev

<div><h2 class="jobSectionHeader"><b>Cybersecurity Manager</b></h2>
<div><ul><li><div>Fixed-term contract</div>
</li>
<li><div>Full-time</div>
</li>
<li><div>At least 10 years of experience (Professional)</div>
</li>
<li><div>Bachelor degree</div>
</li>
<li><div>Cyber Security Manager/Expert</div></li></ul></div></div>
<br><div><div><div><div><h2 class="jobSectionHeader"><b>Mission
</b></h2><p></p><div><p><b>JOB PURPOSE:</b></p><p>
The Cybersecurity Manager is responsible for the strategic design, implementation, and continuous maturation of the company&rsquo;s cybersecurity posture across all business units. This role oversees local security operations, leads the in-house Security Operations Center (SOC), ensuring compliance with ISO 27001 certification and ensuring alignment with recognized security frameworks (NIST CSF). By leading Governance, Risk, and Compliance (GRC) initiatives and fostering cross-functional partnerships with IT and Digital teams, the Manager ensures the resilience of the organization&rsquo;s digital ecosystem against emerging threats.</p></div></div><p></p><div><br>
<h2 class="jobSectionHeader"><b>Profile
</b></h2><p></p><div><p><b>RESPONSIBILITIES/DUTIES</b></p><p><b>
Cybersecurity Governance &amp; Strategy</b></p><ul><li> Develop and execute the company-wide cybersecurity strategy in alignment with organizational objectives.</li><li> Design, maintain, and enforce a robust suite of security policies, standards, and procedures based on ISO 27001 and NIST CSF to ensure operational consistency.</li><li> Drive the end-to-end ISO 27001 certification lifecycle, including initial gap analysis, control implementation, and final readiness audits.</li><li> Establish a high-maturity GRC ecosystem to centralize risk management, regulatory compliance, and corporate security governance.</li></ul><p><b>
Security Operations &amp; SOC Management</b></p><ul><li> Provide strategic direction and technical mentorship to the SOC team, fostering a culture of continuous learning and incident excellence.</li><li> Standardize SOC workflows&mdash;including SIEM tuning, threat hunting, alert triage, and incident response&mdash;to meet or exceed industry benchmarks.</li><li> Develop and present high-level SOC performance metrics, and KPI dashboards to senior management and relevant stakeholders.</li></ul><p><b>
Technical Security Oversight</b></p><ul><li> Direct the deployment and lifecycle management of advanced security solutions, including Firewalls, EDR/XDR, IDS/IPS, IAM, and Endpoint Protection.</li><li> Coordinate comprehensive vulnerability scans, penetration tests, ensuring prioritized remediation based on business impact.</li><li> Mandate and audit secure configuration standards and &quot;Security by Design&quot; principles across cloud infrastructure, and business applications.</li></ul><p><b>
Cybersecurity Risk Management</b></p><ul><li> Lead enterprise-level cybersecurity risk assessments to identify, evaluate, and mitigate potential threats, maintaining a dynamic and actionable Risk Register.</li><li> Define and oversee the security vetting process for vendors and third-party partners.</li></ul><p><b>
Awareness, Training &amp; Culture</b></p><ul><li> Champion a security-first culture through the design and delivery of a comprehensive cybersecurity awareness program.</li><li> Manage phishing simulations and targeted training campaigns to reduce the organization&rsquo;s human-risk surface.</li></ul><p><b>
Compliance, Audit &amp; Reporting</b></p><ul><li> Act as the primary liaison for internal and external auditors, ensuring the integrity of evidence for ISO 27001 and regulatory audits.</li><li> Continuously monitor the legal and regulatory landscape to ensure organizational compliance with data protection and cybersecurity mandates.</li></ul><p><b>
Safety Responsibilities</b></p><ul><li> Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.</li><li> Comply with the requirements of RDMC RQHSE Policy and Safety Management System.</li><li> Be mindful that Safety, Security, and Environmental protection are everyone&rsquo;s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.</li></ul><p><b>
ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><p><b>
QUALIFICATIONS:</b></p><ul><li> Bachelor&rsquo;s degree in Computer Science, Business Information Systems, Information Security or a related field (required).</li><li> CISSP, CISM, or CISA certifications are preferred.</li><li> ISO 27001 Lead Implementer or Lead Auditor is preferred.</li><li> ITIL Foundation is a plus.</li><li> Fluent in English and Arabic, French is a plus.</li></ul><p><b>
KNOWLEDGE:</b></p><ul><li> Advanced understanding of network security, cloud security, cryptography, and application security.</li><li> Strong knowledge of ISO 27001, NIST Cybersecurity Framework, and GRC practices.</li></ul><p><b>
EXPERIENCE:</b></p><ul><li> 10+ years of experience in Cybersecurity roles, with at least 3 years in team leadership.</li><li> Proven experience managing SOC operations and security engineering team.</li><li> Strong track record of cross-functional collaboration and stakeholder engagement.</li></ul><p><b>
DESIRED BEHAVIORS &amp; EXPERIENCES</b></p><ul><li> <b>Influence &amp; Engagement:</b> Builds strong relationships and effectively engages with cross-functional stakeholders to achieve alignment and buy-in.</li><li> <b>Analytical Thinking: </b>Evaluates complex problems, interprets data effectively, and makes sound decisions based on insights.</li><li> <b>Execution Excellence:</b> Delivers high-quality outcomes on time, manages multiple priorities, and ensures effective follow-through.</li><li> <b>Change Agility:</b> Adapts quickly to evolving needs, leads change with confidence, and helps others navigate transitions smoothly.</li><li> <b>Communication:</b> Expresses ideas clearly and professionally, prepares impactful documentation, and engages effectively with diverse audiences.</li><li> <b>Collaboration: </b>Promotes teamwork, shares knowledge openly, and supports others to achieve common goals.</li><li> <b>Attention to Detail:</b> Maintains accuracy and consistency in documentation, reporting, and system configurations.</li><li> <b>Accountability:</b> Demonstrates ownership, responsibility, and reliability in delivering on objectives.</li><li> <b>Resilience:</b> Remains composed under pressure, solves problems calmly, and stays focused on long-term results.</li></ul></div></div></div></div><br>
<p></p>
<div><div><div><h3 class="jobSectionHeader"><b>Location</b></h3>
<p></p><div><div><div><b>Location</b></div></div><b>
</b><div><b>Address</b></div><b>
</b></div><p>Cairo, Cairo, Egypt</p></div></div></div></div><div></div>

Cybersecurity Manager

Mantrac Group

<div>
 <p>
  <strong>
   Job Overview:
  </strong>
 </p>
 <p>
  The Cybersecurity Governance, Risk, and Compliance (GRC) Lead will be responsible for developing, implementing, and maintaining the organization&rsquo;s cybersecurity GRC framework. This role ensures that security policies, risk management practices, and compliance requirements are effectively integrated into business operations. The GRC Lead will act as the primary point of contact for all GRC-related initiatives, driving continuous improvement and alignment with industry standards.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Description/ Duties:
  </strong>
 </p>
 <ul>
  <li>
   Develop, maintain, and enforce cybersecurity policies, standards, and procedures.
  </li>
  <li>
   Establish governance frameworks aligned with ISO 27001, NIST, and other relevant standards.
  </li>
  <li>
   Provide strategic guidance to leadership on cybersecurity governance.
  </li>
  <li>
   Conduct enterprise-wide risk assessments and identify vulnerabilities.
  </li>
  <li>
   Develop risk mitigation strategies and track remediation efforts.
  </li>
  <li>
   Monitor emerging threats and regulatory changes to adjust risk posture.
  </li>
  <li>
   Lead internal and external compliance audits (e.g., GDPR, PCI-DSS).
  </li>
  <li>
   Ensure adherence to regulatory requirements and industry best practices.
  </li>
  <li>
   Maintain audit readiness and coordinate with external auditors.
  </li>
  <li>
   Partner with IT, Legal, and Business Units to embed GRC practices across the organization.
  </li>
  <li>
   Oversee third-party risk management, including vendor assessments and SLA monitoring.
  </li>
  <li>
   Mentor and guide junior team members in GRC practices.
  </li>
  <li>
   Prepare and present detailed reports on risk, compliance, and audit findings to senior management.
  </li>
  <li>
   Communicate cybersecurity risks and compliance status to stakeholders in clear, actionable terms.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Qualifications:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field (Master&rsquo;s preferred).
  </li>
  <li>
   7+ years of experience in cybersecurity governance, risk, and compliance.
  </li>
  <li>
   Strong knowledge of frameworks such as ISO 27001, NIST CSF, COBIT, and CIS Controls.
  </li>
  <li>
   Experience with regulatory compliance (GDPR, HIPAA, PCI-DSS, SOX).
  </li>
  <li>
   Proven track record in leading audits and risk assessments.
  </li>
  <li>
   Excellent communication, leadership, and stakeholder management skills.
  </li>
  <li>
   Relevant certifications (CISM, CISSP, CRISC, ISO 27001 Lead Auditor/Implementer).
  </li>
  <li>
   Experience with GRC tools (e.g., Archer, ServiceNow GRC, MetricStream).
  </li>
  <li>
   Familiarity with cloud security compliance (Azure, AWS, GCP).
  </li>
  <li>
   Strong analytical and problem-solving abilities.
  </li>
  <li>
   Ability to thrive in a fast-paced, evolving threat landscape.
  </li>
 </ul>
 <p>
 </p>
</div>


Cybersecurity GRC Lead

Grant Thornton

<div><div><h4 class="jobSectionHeader"><b>Job Overview</b></h4>
<p></p><div><p>We&rsquo;re a large and growing professional services firm that still feels like a community. With over 76,000 professionals in more than 150 countries, we combine global scale with local expertise to help dynamic organizations unlock their potential for growth. We truly care about our colleagues, our clients, and the communities where we work and live.</p>
<p>
As a Manager, you&rsquo;ll oversee the full spectrum of regulatory compliance advisory services for high-profile clients, manage project portfolios, and guide the team in achieving business objectives and maintaining client satisfaction. Discover your purple and join our Regulatory Advisory Team today!</p>
<p><b>
Let us paint a picture for you</b></p>
<p>
Imagine being part of a team that puts &ldquo;we before me&rdquo;, where flexibility is a mindset, and where you trust your colleagues to have your back.</p>
<p>
Imagine working for an organization that believes in the power of authenticity in everything that we do. Whether you're steering discussions in a client meeting, tackling your fear of heights at the top of the Burj Khalifa or ziplining across Jebel Jais &ndash; bring your true self to work. Be a part of a team driven by a purpose of shaping the world that we live in, based on trust and integrity in markets, dynamic businesses, and communities where businesses and people thrive.</p>
<p>
Join us to expand your horizons, be inspired, face challenges, and most importantly, be yourself.</p>
<p><b>
About the Regulatory Advisory Service Line</b></p>
<p>
Our Regulatory / Governance, Risk and Compliance Advisory practice supply a range of services to regulatory authorities, licensed financial institutions and other relevant organizations. Partnering with our colleagues in the wider Advisory, our work falls broadly into the following areas: Regulatory Compliance Advisory, Corporate Governance Advisory, Non-Financial Risk Management, Consumer Protection Advisory and Islamic Finance Advisory.</p>
<p><b>
As a Manager some of your responsibilities will include:</b></p>
<ul>
<li>Overseeing the delivery of regulatory / GRC advisory engagements</li>
<li>Providing high-level strategic advice to clients on regulatory and compliance matters</li>
<li>Leading the development of new service offerings and market expansion strategies</li>
<li>Representing the firm at industry events, conferences, and regulatory bodies</li>
<li>Planning the engagement approach and overseeing the delivery of the engagement from planning to completion, including performance review of the team members&rsquo; work</li>
<li>Contributing to business development efforts, including proposal development, client presentations, and training materials</li>
<li>Preparing detailed reports outlining project deliverables and where relevant professional recommendations</li>
</ul>
<p><b>Think you've got what it takes to be a Manager? Like the color purple? Great. Here's a few more boxes we're also hoping you can tick:</b></p>
<ul>
<li>7 + years of experience working in financial institutions, regulatory bodies, or consulting firms</li>
<li>Strong experience across GRC, regulatory compliance, corporate governance, consumer protection and internal audit &ndash; Islamic Finance is a plus</li>
<li>Demonstrated experience advising regulatory authorities and financial services clients, including banks, asset managers, and other regulated financial institutions</li>
<li>In‑depth knowledge of UAE financial regulatory frameworks, including hands‑on experience with the Central Bank of the UAE, Capital Markets Authority and other regulatory requirements</li>
<li>Experience supporting or leading regulatory compliance, corporate governance, non-financial risk management and consumer protection initiatives is strongly preferred</li>
<li>Specific exposure to Market Conduct, Consumer Protection and Islamic Finance regulatory and compliance frameworks is an advantage</li>
<li>Hold a leading professional qualification such as the ICA, CIA or Company Secretariat degrees
</li><li>Proven ability to operate in a client‑centric, high‑pressure environment and deliver complex engagements against tight deadlines</li>
<li>Exceptional stakeholder management and client relationship skills, with experience engaging senior management and boards</li>
<li>Strong analytical and problem‑solving skills, with the ability to interpret legislation, regulatory guidance, and supervisory expectations</li>
<li>Excellent written and verbal communication skills in English; Arabic is advantageous</li>
<li>Ability to thrive in a multicultural, diverse, and fast‑paced environment</li>
<li>Strong proficiency in Microsoft Office applications, usage of AI based tools is an advantage</li>
</ul></div><p></p>
<h4 class="jobSectionHeader"><b>Skills</b></h4>
<p></p><div><p>.</p></div><br>
<p></p>
<p></p>
</div><div></div><div><div><h4 class="jobSectionHeader"><b>Job Details</b></h4>
<div><div>Job Location</div>
<div>Abu Dhabi, UAE</div>
</div><div><div>Job Role</div>
<div>Business Advisory</div>
</div><div><div>Joining Date</div>
<div>Jun-2026</div>
</div><div><div>Preferred Contract Type</div>
<div>Permanent</div>
</div></div><div><h4 class="jobSectionHeader"><b>Preferred Candidate</b></h4>
<div><div>Career Level</div>
<div>Mid-Management</div>
</div><div><div>Highest Education</div>
<div>Bachelor's degree</div></div></div></div></div>

Manager | Governance, Risk and Compliance | Regulatory Advisory

KPMG

<div><p>Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.</p>
<p>KPMG is currently seeking a Manager, Cyber Assessment, Federal IT Compliance, Governance, Risk and Compliance to join our Federal Services organization.</p><h3 class="jobSectionHeader"><b>
Responsibilities:</b></h3><ul><li>
Oversee the Federal IT GRC program that will focus on and specialize in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Controlled Unclassified Information (CUI), Cybersecurity Maturity Model Certification (CMMC), and NIST SP 800-53 frameworks in support of the Federal Services practice</li><li>
Undergo development, management, and maintenance of the Federal information system security program procedural documentation mapped to NIST SP 800-171, NIST SP 800-53, and other standards and frameworks</li><li>
Conduct regular assessments and audits to evaluate the effectiveness of the NIST &amp; CMMC IT GRC program; identify any potential gaps or vulnerabilities, and drive recommended corrective action plans to remediation by conducting regular stakeholder discussions and managing stakeholder relations</li><li>
Manage and safeguard sensitive information (FCI/CUI) by serving as CUI Program POC, identifying compliance requirements across all contract vehicles and business development process, and implementing appropriate data handling and storage protocols</li><li>
Provide input into the development of risk registers and regular risk assessments, and act as the point of contact with the broader Federal Services practice for translating FAR/DFARS regulations and compliance requirements into related business and technology platform impacts; present compliance risk posture reports, dashboards, and governance committee materials to senior leadership, highlighting key risks, control deficiencies, and remediation progress</li><li>
Offer strategic input and insights beyond baseline program management; build and maintain strong, collaborative relationships with operational teams, relevant firmwide GRC counterparts, and practice leadership; act as a liaison with external auditors/assessors, regulators, and government agencies during NIST &amp; CMMC compliance audits and assessments</li><li>
Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment</li></ul><h3 class="jobSectionHeader"><b>
Qualifications:</b></h3><ul><li>
Minimum ten years of recent experience in governance, risk, and compliance, with at least five years supporting the Federal government in the public sector, government, and/or consulting</li><li>
Bachelor's degree in information technology, cybersecurity, business administration, or related field; professional certifications such as CISSP, CISM, CRISC, or five years supporting the Federal government in the public sector, government,
</li><li>In depth knowledge of FAR/DFARS and Federal Government regulatory and compliance requirements including CMMC, NIST, ISO, HIPAA, and other IT, Privacy and Information Security Frameworks and laws</li><li>
Familiarity with enterprise GRC platforms</li><li>
Strong verbal/written communication, problem solving, analytical and independent judgment skills to support an environment driven by customer service and teamwork; ability to positively influence, mentor and be a credible source of knowledge to less experienced team members</li><li>
Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)</li></ul>
<div>KPMG LLP and its affiliates and subsidiaries (&ldquo;KPMG&rdquo;) complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits &amp; How We Work.</div><div></div><div><br>
Follow this link to obtain salary ranges by city outside of CA:</div>
https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=4864_9_25
<div><div>KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.</div><div></div><div><br>
KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.</div><div></div><div><br>
Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.</div></div></div>

Manager, Cyber Assessment, Federal IT Compliance, Governance, Risk and Compliance

Search 10000+ Grc manager jobs near you this March. New roles added regularly across leading industries. Apply today.