it risk manager

American Honda Motor

<div><div><h2 class="jobSectionHeader"><b>Description</b></h2><div><div><b>
Legal Entity:</b> American Honda Finance Corp.<br>
<b>Business Unit:</b> American Honda Finance Corp
<br>
<b>Department: </b>Corp Gov Financial Compliance</div><p><b>
Division:</b> Finance &amp; Administration Division<br>
<b>Work Location:</b> Torrance - Main Campus Location<br>
<b>Shift:</b> 1st<br>
<b>Workstyle: </b>Remote Eligible up to 20%
<br>
<b>Career Level: </b>5
<br>
<b>Job Grade:</b> Exempt-4
<br>
<b>Salary Range:</b> $94,900.00 - $142,400.00</p><p><br>
</p><div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
EX4 - Assistant Manager, AHFC SOX IT Lead</p><p></p><p><br>
American Honda Finance Corporation is currently seeking an Assistant Manager, SOX IT Lead for our Corporate Governance and Financial Compliance division. This position leads the design, implementation, monitoring, and testing of IT General Controls (ITGC) and IT Application Controls (ITAC) under SOX compliance for AHFC. This role ensures robust governance and risk management practices to mitigate risks and support the overall reliability of financial reporting by serving as the primary SME for complex IT control environments, system architectures, and emerging technologies impacting AHFC&rsquo;s SOX compliance.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Accountabilities</b></h2>
</div><div><p>
Key accountabilities will include but not be limited to:</p><p></p><p><br>
ITGC and ITAC SOX Compliance Leadership</p><ul><li>
Lead the planning, execution, and monitoring of ITGC and ITAC for annual SOX compliance activities.</li></ul><p>
Audit Coordination</p><ul><li>
Act as the primary liaison between AHM IT GRC, CT IT, internal auditors, and external auditors for ITGC and ITAC Testing</li></ul><p>
Governance &amp; Documentation</p><ul><li>
Maintain Risk Control Matrices (RCMS), data flow diagrams, and control documentation.</li></ul><p>
Project Support</p><ul><li>
Collaborate on technology projects to ensure SOX compliance requirements are integrated.</li></ul><p>
Training and Communication</p><ul><li>
Provide guidance and training to CH IT and AHFC Management on SOX requirements and control expectations</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Qualifications, Experience, and Skills</b></h2>
</div><div><p>
We are looking for qualified people with diverse backgrounds and experiences, open minds, and a disciplined work ethic. To bring the future to Honda as an Assistant Manager, you must have:</p><p></p><p><br>
Minimum Education Qualifications:</p><br>
<p></p><ul><li>
BA/BS degree in Information Systems, Computer Science, Accounting, or related filed.</li><li>
Certifications (preferred): CPA (Certified Public Accountant), CIA (Certified Internal Auditor), CISA (Certified Information Systems Auditor), CISSP (Certified Information System Security Professional), or CRISC (Certified in Risk and Information System Control)</li></ul><p></p><p><br>
Minimum Experience:</p><br>
<p></p><ul><li>
8-10+ years in IT Audit, IT compliance, or IT risk management</li><li>
Strong understanding of SOX, ITGCs, and frameworks such as COBIT, COSO, NIST</li><li>
Experience working with ERP Systems</li><li>
Experience in a public company or Big 4 audit environment</li><li>
Experience as a technical SME for IT controls.</li></ul><p></p><p><br>
Other Job Specific Skills:</p><br>
<p></p><ul><li>
Ability to work independently and exercise professional judgement.</li><li>
Ability to interpret technical concepts and translate then into control requirements.</li><li>
Excellent communication and stakeholder management skills</li><li>
Expertise in ITGC domains: logical access, change, backup, incident management, and application controls</li><li>
Knowledge of cloud environments (AWS, Azure) and related control frameworks</li><li>
Strong analytical, problem-solving, and project management skills</li><li>
Cross-functional collaboration and risk-based thinking.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Working Conditions</b></h2>
</div><div><p>
Additional Position Factors:</p><ul><li>
Workstyle: 80/20 (4 days in office 1 day remote) &ndash; Torrance Location</li><li>
Travel 5%</li></ul></div></div></div><p><b>
What differentiates Honda and make us an employer of choice?</b></p><p></p><p><b><br>
Total Rewards:</b></p><ul><li>
Competitive Base Salary (pay will be based on several variables that include, but not limited to geographic location, work experience, etc.)</li><li>
Regional Bonus (when applicable)</li><li>
Manager Lease Car Program (No Cost - Car, Maintenance, and Insurance included)</li><li>
Industry-leading Benefit Plans (Medical, Dental, Vision, Rx)</li><li>
Paid time off, including vacation, holidays, shutdown</li><li>
Company Paid Short-Term and Long-Term Disability</li><li>
401K Plan with company match + additional contribution</li><li>
Relocation assistance (if eligible)</li></ul><p></p><p><b><br>
Career Growth:</b></p><ul><li>
Advancement Opportunities</li><li>
Career Mobility</li><li>
Education Reimbursement for Continued Learning</li><li>
Training and Development Programs</li></ul><p></p><p><b><br>
Additional Offerings</b>:</p><ul><li>
Lifestyle Account</li><li>
Childcare Reimbursement Account</li><li>
Elder Care Support</li><li>
Tuition Assistance &amp; Student Loan Repayment</li><li>
Wellbeing Program</li><li>
Community Service and Engagement Programs</li><li>
Product Programs</li></ul><p></p><p><br>
Honda is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, creed, religion, national origin, sex, sexual orientation, gender identity and expression, age, disability, veteran status, or any other protected factor.</p></div></div></div><p></p>

Asst Manager (101559)

بنك التعمير والإسكان HD Bank

<div>
 <p>
  <strong>
   <em>
    <u>
     Job Summary:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The
  <strong>
   IT Risk Management Unit Manager
  </strong>
  is responsible for
  <strong>
   identifying, assessing, mitigating, and monitoring IT-related risks
  </strong>
  within the organization. This role ensures that the bank's IT systems, infrastructure, and operations comply with
  <strong>
   risk management frameworks, regulatory requirements, and cybersecurity best practices
  </strong>
  to safeguard the organization from potential threats.
 </p>
 <p>
 </p>
 <p>
  <strong>
   <em>
    <u>
     Job Responsibilities:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Develop and enforce IT asset management policies and procedures.
  </li>
  <li>
   Conduct risk assessments to identify cybersecurity threats, operational vulnerabilities, and compliance gaps.
  </li>
  <li>
   Evaluate IT systems, applications, and processes to determine risk exposure and impact.
  </li>
  <li>
   Develop and maintain an IT risk register, tracking identified risks and their mitigation measures.
  </li>
  <li>
   Develop and implement IT risk management strategies and frameworks to minimize operational risks.
  </li>
  <li>
   Recommend security controls, technology enhancements, and process improvements to reduce IT risk exposure.
  </li>
  <li>
   Ensure disaster recovery (DR) and business continuity (BCP) plans are in place and tested regularly.
  </li>
  <li>
   Ensure IT risk management practices align with regulatory standards (e.g., GDPR, PCI DSS, ISO 27001, NIST, COBIT).
  </li>
  <li>
   Collaborate with internal and external auditors to address compliance requirements and risk assessments.
  </li>
  <li>
   Stay updated on IT risk regulatory changes and ensure necessary adjustments to risk management policies.
  </li>
  <li>
   Develop and oversee the IT incident response plan, ensuring swift and effective resolution of IT security incidents.
  </li>
  <li>
   Work with IT security teams to analyze and report security breaches, cyber threats, and system failures.
  </li>
  <li>
   Conduct post-incident evaluations to identify root causes and implement preventive measures.
  </li>
  <li>
   Work closely with senior IT leaders, cybersecurity teams, compliance officers, and risk managers to integrate IT risk management into business operations.
  </li>
  <li>
   Provide risk advisory and training to IT and business teams to enhance risk awareness.
  </li>
  <li>
   Act as the primary liaison for regulatory bodies, auditors, and external service providers regarding IT risk-related matters.
  </li>
  <li>
   Prepare and present IT risk reports, risk dashboards, and compliance updates to senior management and regulatory authorities.
  </li>
  <li>
   Maintain comprehensive documentation of risk management policies, procedures, and assessments.
  </li>
  <li>
   Conduct periodic risk reviews and IT audits to ensure alignment with best practices.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <em>
    <u>
     Job Qualifications:
    </u>
   </em>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field.
  </li>
  <li>
   <strong>
    Minimum 8+ years
   </strong>
   of experience in
   <strong>
    IT risk management, cybersecurity, or IT governance
   </strong>
   .
  </li>
  <li>
   Strong background in
   <strong>
    IT compliance, security frameworks, and enterprise risk management
   </strong>
   .
  </li>
  <li>
   Experience in
   <strong>
    managing IT risk programs, conducting IT risk assessments, and collaborating with auditors
   </strong>
   .
  </li>
 </ul>
 <p>
 </p>
</div>


IT Risk Management Unit Manager

Waters

<div>Overview:<div></div><div><br>
Join the Corporate Accounting team at Waters Corporation as a Manager of IT Internal Controls, where you will lead global efforts to maintain a strong, compliant internal control environment aligned with SOX 404. This role partners cross-functionally with IT, Internal Audit, and business leaders to design, test, and improve ITGC and ITAC frameworks across a dynamic, multinational organization. You will play a key leadership role in driving control effectiveness, supporting audits, and integrating controls for acquisitions in a scalable and forward-looking environment.</div><br>
<div></div>
Responsibilities:<div></div><div><div><br>
</div></div><ul><li>
Lead and develop a team responsible for global SOX control maintenance, testing, and continuous improvement</li><li>
Manage and enhance ITGC and ITAC frameworks, including control design, risk assessments, and updates for system and business changes</li><li>
Plan and oversee IT control testing and audit activities with Internal Audit and external auditors</li><li>
Analyze control deficiencies, perform root cause analysis, and drive sustainable remediation with control owners</li><li>
Develop KPIs, dashboards, and automation to improve control monitoring and reporting</li><li>
Provide advisory support to IT and project teams to embed controls into system implementations and SDLC processes</li><li>
Lead IT control integration for acquisitions, ensuring alignment and successful stabilization</li></ul><br>
<div></div>
Qualifications:<br>
<div></div><ul><li>
Bachelor&rsquo;s degree in Accounting, Finance, Information Systems, or related field; certifications (CIA, CISA, CRISC, CISM, CRMA) preferred</li><li>
8&ndash;12 years of experience in IT controls, IT audit, or IT risk in a multinational environment</li><li>
Strong experience with SOX 404 compliance, including ITGC and ITAC testing and remediation</li><li>
Experience with ERP systems (SAP S/4HANA preferred) and tools such as ServiceNow, SailPoint, Databricks, and Power BI</li><li>
Strong knowledge of IT control areas including access management, change management, and SDLC</li><li>
Excellent analytical, communication, and stakeholder management skills</li><li>
Ability to work independently, manage priorities, and operate effectively in a fast-paced environment</li></ul>
Company Description:
<div>
Waters Corporation (NYSE:WAT) is a global leader in life sciences and diagnostics, dedicated to accelerating the benefits of pioneering science through analytical technologies, informatics, and service. With a focus on regulated, high-volume testing environments, our innovative portfolio harnesses deep scientific expertise across chemistry, physics, and biology. We collaborate with customers around the world to advance the release of effective, high-quality medicines, ensure the safety of food and water, and drive better patient outcomes by detecting diseases earlier, managing routine infections, and combating antibiotic resistance. Through a shared culture of relentless innovation, our passionate team of ~16,000 colleagues turn scientific challenges into breakthroughs that improve lives worldwide.</div><div></div><div><i><br>
Diversity and inclusion are fundamental to our core values at Waters Corporation. It benefits our employees, our products, our customers and our community. Waters complies with all applicable federal, state, and local laws. Qualified applicants are considered without regard to sex, race, color, ancestry, national origin, citizenship status, religion, age, marital status (including civil unions), military service, veteran status, pregnancy (including childbirth and related medical conditions), genetic information, sexual orientation, gender identity, legally recognized disability, domestic violence victim status, or any other characteristic protected by law. Waters is proud to be an equal opportunity workplace and is an affirmative action employer. All hiring decisions are based solely on qualifications, merit, and business needs at the time.</i></div>
Key Words: SOX 404, IT Controls, ITGC, ITAC, IT Audit, Risk Management, Compliance, ERP (SAP S/4HANA), GRC, Access Controls, Change Management, SDLC, Control Testing, Audit, Data Analytics</div>

Manager IT Internal Controls

Fidelity Investments

<div><h3 class="jobSectionHeader"><b>Job Description:</b></h3><p><b>
Job Title</b><i> </i><i>IT Audit Manager</i>
</p><p><b>The Role</b>
</p><p>Are you looking for a position to grow your technology skills, expand your knowledge of financial services, and give you the opportunity to problem solve with some of the best minds in the financial services and technology industries? There is no better place to drive solutions for improving internal controls than to operate at the nexus of technology and business with Fidelity Corporate Audit! As an IT Audit Manager, you will provide independent and objective audit and advisory services that help Fidelity manage risk, improve customer service, and enhance business performance. Our primary motivation is to drive positive change throughout the firm.
</p><p><b>The Expertise and Skills You Bring</b>
</p><ul><li><p>BA/BS/MS in Technology, Information Systems, Cybersecurity, or related field of study.
</p></li><li><p>Professional audit or information security certifications preferred (CIA, CPA, CISA, CISSP, SANS GIAC, etc.).
</p></li><li><p>Cloud computing (AWS or Azure) related associate-level certifications preferred. Security or Professional cloud certifications would be a plus.
</p></li><li><p>5-7 years of experience in performing and leading complex information technology audits, preferably financial services.
</p></li><li><p>Knowledge of cloud security, containerization, API, DevOps, secure software development, application security, databases, and operating systems. Ability to independently perform hands-on IT general controls testing across many of these areas.
</p></li><li><p>Knowledge of authentication, authorization, and credential management.
</p></li><li><p>Understanding of Artificial Intelligence, Machine Learning, Data Science and Robotic Process Automation.
</p></li><li><p>Understanding of security monitoring activities that enable vulnerability, internal/external threat monitoring, incident management and threat intelligence activities.
</p></li><li><p>Ability to work simultaneously on multiple tasks and lead team priorities and workload.
</p></li><li><p>Strong technical problem solving and data analytical skills. Scripting and automation experience would be a plus.
</p></li><li><p>Commitment to innovative, collaborative, and digital working style.
</p></li><li><p>Strong presentation, written, and interpersonal communication skills.
</p></li><li><p>Hands-on work style and &lsquo;can do&rsquo; attitude with a strong desire to make things happen.
</p></li><li><p>Curiosity and hunger to learn.
</p></li></ul><p><b>The Team</b>
</p><p>The IT Audit Manager will be responsible for performing complex technology and/or business-integrated audits in support of Fidelity&rsquo;s businesses. Key areas of focus include developing hypotheses around risk and controls, providing input to the development of the integrated audit plan, and collaborating with a successful team. Responsibilities include and are not limited to:
</p><ul><li><p>Works with business and technology management to build an understanding of complex functions.
</p></li><li><p>Workflows technology and end-to-end related processes, highlighting risks and controls embedded throughout the function.
</p></li><li><p>Leverages audit automation tools in the evaluation of business operations and systems.
</p></li><li><p>Performs and reviews audit test work including organizing and analyzing data, testing controls and documenting results.
</p></li><li><p>Applies strategic and data analytics concepts, principles, and techniques to more efficiently and effectively identify control deficiencies.
</p></li><li><p>Drafts audit reports that provide a clear description of issues identified, related implications to the business or enterprise as a whole and management action plans to resolve the issues.
</p></li><li><p>Coaches and mentors Analysts and Senior Analysts on the team.
</p></li><li><p>Builds deep working relationships with audit teams and clients.
</p></li></ul><p><b>Company Overview
</b></p><p>Fidelity Investments is a privately held company with a mission <i>to strengthen the financial well-being of our clients.</i> We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients&rsquo; money.
</p><p><b>Join Us</b>
</p><p>At Fidelity, you&rsquo;ll find endless opportunities to build a meaningful career that positively impacts peoples&rsquo; lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a Glassdoor Employees&rsquo; Choice Award, we have been recognized by our employees as a top 10 Best Place to Work in 2024. And you don&rsquo;t need a finance background to succeed at Fidelity&mdash;we offer a range of opportunities for learning so you can build the career you&rsquo;ve always imagined.
</p><p>Fidelity&rsquo;s hybrid working model blends the best of both onsite and offsite work experiences. Working onsite is important for our business strategy and our culture. We also value the benefits that working offsite offers associates. Most hybrid roles require associates to work onsite all business days of every other week in a Fidelity office.
</p><p><b>At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry</b>. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation, detailed in this document, and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.
</p><p>We invite you to <b>Find Your Fidelity</b> at fidelitycareers.com.
</p><p>Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.
</p><p>Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, contact the HR Accommodation Team by sending an email to accommodations@fmr.com.
</p><h3 class="jobSectionHeader"><b>Certifications:</b></h3><h3 class="jobSectionHeader"><b>
Category:</b></h3>
Audit<p>
Please be advised that Fidelity&rsquo;s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.</p></div>

IT Audit Manager

Dautom

<div>
 <p>
  Key Responsibilities
 </p>
 <p>
  1. Governance &amp; Compliance
 </p>
 <p>
  &bull; Develop and update IT policies, procedures, and standards in alignment with national frameworks and international standards such as COBIT, ISO 38500, and ITIL.
 </p>
 <p>
  &bull; Monitor compliance with IT policies across all departments and provide corrective guidance when
 </p>
 <p>
  required.
 </p>
 <p>
  &bull; Prepare periodic compliance reports for senior leadership.
 </p>
 <p>
  2. Risk Management
 </p>
 <p>
  &bull; Identify, assess, and document IT risks in coordination with Cybersecurity, PMO, and operational teams.
 </p>
 <p>
  &bull; Develop and implement risk mitigation and treatment plans.
 </p>
 <p>
  &bull; Continuously monitor risk levels and recommend necessary actions.
 </p>
 <p>
  3. IT Strategy &amp; Portfolio Alignment
 </p>
 <p>
  &bull; Support the development and review of the IT Strategy and Digital Transformation Strategy.
 </p>
 <p>
  &bull; Evaluate IT projects to ensure alignment with strategic goals and digital government priorities.
 </p>
 <p>
  &bull; Participate in creating and maintaining policies for project management, change management, incident management, asset management, and business continuity.
 </p>
 <p>
  4. Quality &amp; Performance
 </p>
 <p>
  &bull; Develop performance indicators (KPIs) to measure the effectiveness of IT governance.
 </p>
 <p>
  &bull; Monitor and report on IT service performance and compliance with SLAs.
 </p>
 <p>
  &bull; Prepare monthly and quarterly performance dashboards for the leadership team.
 </p>
 <p>
  5. Documentation &amp; Audits
 </p>
 <p>
  &bull; Develop and maintain governance documentation including policies, procedures, templates, and
 </p>
 <p>
  guidelines.
 </p>
 <p>
  &bull; Coordinate with internal and external auditors to ensure audit readiness.
 </p>
 <p>
  &bull; Address audit findings and recommend improvements to processes and controls.
 </p>
 <p>
  6. Digital Government Standards
 </p>
 <p>
  &bull; Ensure alignment with national digital government requirements defined by Sharjah Digital Government
 </p>
 <p>
  and relevant UAE government frameworks.
 </p>
 <p>
  &bull; Support teams in achieving and maintaining compliance with Digital Government Maturity and other
 </p>
 <p>
  digital initiatives.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Required Skills &amp; Qualifications
 </p>
 <p>
  &bull; Bachelor&rsquo;s degree in Information Technology, Information Systems, Computer Science, or related field.
 </p>
 <p>
  &bull; 3&ndash;7 years of experience in IT governance, compliance, or risk management.
 </p>
 <p>
  &bull; Strong knowledge of COBIT, ITIL, ISO 38500, ISO 27001, ISO 20000.
 </p>
 <p>
  &bull; National cybersecurity and digital governance standards (NESA, TDRA).
 </p>
 <p>
  &bull; Strong analytical and problem-solving skills.
 </p>
 <p>
  &bull; Experience in drafting IT policies and governance documentation.
 </p>
 <p>
  &bull; Excellent communication skills with the ability to prepare reports for senior leadership.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Preferred Certifications
 </p>
 <p>
  &bull; COBIT Foundation
 </p>
 <p>
  &bull; ITIL 4 Foundation
 </p>
 <p>
  &bull; ISO 27001 Lead Implementer
 </p>
 <p>
  &bull; CGEIT or similar (added advantage)
 </p>
</div>


IT Governance Specialist

True Anomaly

<div><div><p>Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.</p>
<p>
OUR MISSION</p>
<p>
True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors &mdash; enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.</p>
<p>
OUR VALUES</p>
<ul>
<li><b>Be the offset.</b> We create asymmetric advantages with creativity and ingenuity.</li>
<li><b>What would it take?</b> We challenge assumptions to deliver ambitious results.</li>
<li><b>It&rsquo;s the people.</b> Our team is our competitive advantage and we are better together.</li>
</ul></div><div><p><b>
Your Mission</b></p>
<p>
We are seeking a driven and detail-oriented Enterprise Risk Analyst to support two distinct but interconnected lines of effort: Enterprise Risk Management (ERM) and Third-Party Vendor Risk Management (TPVRM). Reporting to the Senior Enterprise Risk Manager, you will play a hands-on role in executing risk assessments, maintaining program documentation, tracking remediation activities, and building the data foundation that powers executive-level risk decision-making.</p>
<p>
This role is ideal for a mid-career risk professional who is fluent in frameworks such as NIST RMF and CMMC, is developing practical experience with risk quantification methodologies like FAIR and OCTAVE, and is eager to grow within a fast-paced aerospace and defense SaaS environment. You will work closely with engineering, security, legal, compliance, and operations teams to help identify, document, and track risk across the enterprise and its third-party supply chain.</p><br>
<p></p>
<p><b>
Responsibilities:</b></p><br>
<p></p>
<p><b>
Enterprise Risk Management</b></p>
<ul>
<li>Support the design, execution, and continuous improvement of the enterprise risk management program under the direction of the Senior Enterprise Risk Manager.</li>
</ul><ul><li>Assist in conducting structured risk assessments using OCTAVE or similar threat-and-asset-centric methodologies, documenting findings, threat profiles, and recommended mitigations.</li>
</ul><ul><li>Support the application of FAIR methodology to help quantify risks in financial terms and contribute to risk prioritization analyses for leadership.</li>
</ul><ul><li>Maintain and update the enterprise risk register, ensuring accuracy of risk ratings, ownership assignments, remediation status, and residual risk tracking.</li>
</ul><ul><li>Build and maintain program dashboards, KPI/KRI reports, and status tracking using tools such as Jira, Confluence, enterprise GRC platforms, and MS Project.</li>
</ul><ul><li>Assist with audit readiness activities including evidence collection, pre-assessment preparation, control documentation, and post-audit remediation tracking.</li>
</ul><ul><li>Support POA&amp;M management for IL5 and IL6 environments, tracking open items to closure and escalating blockers to the Enterprise Risk Manager.</li>
</ul><ul><li>Contribute to the development and maintenance of risk policies, standards, and guidelines aligned to NIST SP 800-53 Rev. 5, NIST SP 800-171, RMF, and CMMC Level 3.</li>
</ul><ul><li>Coordinate and track internal audit schedules, findings, and corrective action plans across business units.</li>
</ul>
<p><b>Third-Party Vendor Risk Management</b></p>
<ul>
<li>Execute vendor risk assessments as part of the onboarding and periodic review lifecycle, including security questionnaire administration, documentation review, and risk scoring.</li>
</ul><ul><li>Maintain the vendor risk inventory and lifecycle tracking records, ensuring all vendors are appropriately tiered and assessed on schedule.</li>
</ul><ul><li>Monitor vendor risk signals including cybersecurity advisories, regulatory actions, and contractual compliance status, escalating material changes to the Enterprise Risk Manager.</li>
</ul><ul><li>Support contract and procurement teams by providing vendor risk assessment findings and recommended risk mitigation language.</li>
</ul><ul><li>Assist in ensuring TPVRM program alignment with CMMC supply chain requirements, DFARS clauses, and ITAR/export control considerations for critical suppliers.</li>
</ul><ul><li>Develop and maintain vendor risk reporting inputs and dashboard content to support executive-level visibility into third-party risk exposure.</li>
</ul>
<p><b>Cross-Functional Collaboration</b></p>
<ul>
<li>Serve as a reliable day-to-day point of contact for risk-related inquiries from internal stakeholders across engineering, security, operations, and legal teams.</li>
</ul><ul><li>Track program milestones, action items, and deliverables, proactively communicating status and flagging risks or dependencies to the Enterprise Risk Manager.</li>
</ul><ul><li>Continuously improve risk program workflows, documentation templates, and reporting processes to support scalable and repeatable execution.</li>
</ul><ul><li>Support the preparation of materials for internal leadership briefings, external assessor interactions, and government partner reviews.</li></ul><br>
<p></p>
<p><b>
Qualifications</b></p>
<ul>
<li><b>5+ years</b> of experience in enterprise risk management, GRC, cybersecurity risk, compliance, or a closely related discipline.</li>
</ul><ul><li>Working knowledge of NIST SP 800-53, NIST SP 800-171, DoD RMF (IL5/IL6), and CMMC, with direct experience supporting assessments or audits under one or more of these frameworks.</li>
</ul><ul><li>Familiarity with risk assessment methodologies including FAIR and/or OCTAVE, with a desire to deepen applied expertise in risk quantification.</li>
</ul><ul><li>Experience supporting or executing third-party/vendor risk assessments, including questionnaire administration, documentation review, and risk tracking.</li>
</ul><ul><li>Hands-on experience with program management and GRC documentation tools including Jira, Confluence (Atlassian suite), MS Project, enterprise GRC platforms, and MS Visio or Lucidchart.</li>
</ul><ul><li>Strong written and verbal communication skills, with the ability to clearly document findings and translate risk concepts for both technical and non-technical audiences.</li>
</ul><ul><li>Highly organized, self-directed, and comfortable managing multiple workstreams simultaneously in a fast-paced, regulated environment.</li>
</ul><ul><li>Active or ability to obtain <b>SECRET</b>, <b>TS/SCI security clearance</b>.</li>
</ul><ul><li>Must be a U.S. citizen, lawful permanent resident, or protected individual per ITAR requirements (8 U.S.C. 1324b(a)(3)).</li></ul><br>
<p></p>
<p><b>
Preferred Qualifications</b></p>
<ul>
<li>Background in startup, aerospace, defense technology, or SaaS companies operating in regulated government markets.</li>
</ul><ul><li>Industry certifications such as:</li>
</ul><ul><li>Certified in Risk and Information Systems Control (CRISC)</li>
</ul><ul><li>Certified Information Systems Auditor (CISA)</li>
</ul><ul><li>Open FAIR Certification (The Open Group)</li>
</ul><ul><li>CompTIA Security+ or equivalent</li>
</ul><ul><li>Certified ScrumMaster (CSM) or similar Agile certification</li>
</ul><ul><li>Experience with cloud environments, particularly Azure Government and/or AWS GovCloud.</li>
</ul><ul><li>Familiarity with POA&amp;M management, SSP documentation, and audit evidence collection in DoD authorization contexts.</li>
</ul><ul><li>Working knowledge of ITAR, EAR, DFARS, and export control considerations as they relate to vendor and supply chain risk.</li>
</ul><ul><li>Familiarity with Agile/Scrum and hybrid project delivery models.</li></ul><br>
<p></p>
<p><b>
Compensation</b></p>
<ul>
<li><b>Base Salary:</b> Denver - $115,000 to $155,000, Long Beach - $120,000 to $165,000, Washington, DC - $120,000 to $165,000</li>
</ul><ul><li><b>Equity + Benefits</b> including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave</li>
</ul>
<p><i>Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.</i></p><br>
<p></p>
<p><b>
Additional Requirements</b></p>
<ul>
<li><b>Work Location:</b> This role will be onsite at one of our office locations: Centennial, CO, Long Beach, CA, or Washington, DC <b>#LI-Onsite</b></li>
</ul><ul><li><b>Work Environment:</b> Standard office setting, working at a desk or in a production factory environment</li>
</ul><ul><li><b>Physical Demands:</b> May include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20 lbs.</li></ul><br>
<p></p>
<p><i>
This position will be open until it is successfully filled.</i></p>
<p>
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.</p>
<p>
We value diversity of experience, knowledge, backgrounds, and perspectives and harness these qualities to create extraordinary impact. True Anomaly is committed to equal employment opportunity regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, pregnancy, maternity or related condition (including breastfeeding) or any other basis as protected by applicable law. If you have a disability or additional need that requires accommodation, please do not hesitate to let us know.</p></div><p></p><div><p><br>
To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.</p>
<p>
True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.</p></div></div><p></p>

Enterprise Risk Analyst

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><div><b>TCS Hyderabad Hiring for Category Manager - Indirect Sourcing</b></div><br>
<div><br>
</div><div>Role: <b>Category Manager - Indirect Sourcing</b>
</div><div>Experience: <b>8-15 Years</b>
</div><div>Job Location: <b>Hyderabad</b>
</div>
<div><br>
<b>Eligibility:</b>
</div><ul><li> Minimum 15 years of regular, full-time education (10 + 2 + 3)
</li></ul><ul><li> Should be flexible with night shifts &amp; rotation shifts
</li></ul>
<div><br>
<b>Good to have Certification</b>
</div><ul><li> CPSM (Certified Professional in Supply Management)
</li></ul><ul><li> CIPS (Chartered Institute of Procurement &amp; Supply)
</li></ul><ul><li> ISM (Institute for Supply Management)
</li></ul><ul><li> CPSD (Certified Professional in Supplier Diversity)
</li></ul>
<div><br>
<b>Required Skills</b>
</div><ul><li> Strategic sourcing and category management expertise
</li></ul><ul><li> Strong analytical and financial modeling skills
</li></ul><ul><li> Advanced stakeholder management and communication skills
</li></ul><ul><li> Strong negotiation and contracting capability
</li></ul><ul><li> Proficiency in SAP, Ariba, or similar ERP/Source to Pay tools
</li></ul><ul><li> Market research and benchmarking capability
</li></ul><ul><li> Results driven and commercially oriented mindset
</li></ul>
<div><br>
<b>Required Technical Skill Set</b>
</div><ul><li> Strategic Sourcing &amp; Category Management (Indirect Spend)
</li></ul><ul><li> RFx execution (RFI/RFP/RFQ)
</li></ul><ul><li> Contracting &amp; Commercial Negotiation
</li></ul><ul><li> Spend Analytics &amp; Business Case Development
</li></ul><ul><li> Supplier Performance &amp; Risk Management
</li></ul><ul><li> ERP &amp; Procurement Platforms (SAP S/4, Ariba)
</li></ul>
<div><br>
<b>Key Responsibilities</b>
</div><ul><li> Develop and execute category strategies for assigned indirect categories (IT, Marketing, Facilities, Travel, Professional Services)
</li></ul><ul><li> Perform end-to-end spend analysis to identify savings, consolidation, and demand management opportunities
</li></ul><ul><li> Lead end to end RFx events including requirement definition, bid evaluation, negotiations, and supplier selection
</li></ul><ul><li> Develop strong business cases quantifying benefits, total cost of ownership, and risk trade offs
</li></ul>&bull; Identify, evaluate, and manage suppliers to ensure quality, reliability, innovation, and cost effectiveness
<ul><li> Negotiate complex contracts including SLAs, KPIs, pricing models, and payment terms in partnership with Legal
</li></ul><ul><li> Translate RFx outcomes into commercially robust and risk appropriate agreements
</li></ul><ul><li> Collaborate with internal stakeholders (IT, Marketing, Finance, Facilities, HR, Legal) to align sourcing strategies with business goals
</li></ul><ul><li> Drive supplier performance management through scorecards, governance forums, and continuous improvement initiatives
</li></ul><ul><li> Leverage SAP/Ariba to improve Source to Pay efficiency, compliance, and transparency
</li></ul><ul><li> Support audits, ensure policy compliance, and manage sourcing documentation
</li></ul></div></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>BUSINESS PROCESS SERVICES</div>
</div><div><div><b>Role</b></div>
<div>Manager</div>
</div><div><div><b>Job Id</b></div>
<div>404070</div>
</div><div><div><b>Desired Skills</b></div>
<div>Supply Chain | SCM - Procurement | SCM - Sourcing</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF COMMERCE</div></div></div><div></div>

Category Manager - Indirect Sourcing

Search 10000+ It risk manager jobs near you this May. New roles added regularly across leading industries. Apply today.