risk and compliance analytics director

Metropolitan Community College (Neb.)

<div>Classification
Regular
Minimum Pay
$95,241.00
Compensation will be commensurate with the level of the position, education, and experience.
JOB DESCRIPTION SUMMARY
This position offers a competitive salary commensurate with experience and qualifications. In addition, we provide a comprehensive benefits package that supports your health, well-being, and professional growth
 
 
The Director of IT Cybersecurity, Risk and Compliance provides leadership in cybersecurity and responsible for the assessing and documenting of the College&rsquo;s compliance and risk posture as they relate to the ITS information assets. This role leads the development, implementation, and continuous improvement of a comprehensive cybersecurity and information security risk management program. This position provides highly technical and information security expertise proactively identifying emerging threats and driving mitigation strategies. The Director oversees the enforcement of internal security policies and procedures and manages user system access and identity management based on industry-standard best practices and compliance requirements, manages 3rd party risks, and provides input for data governance.
ESSENTIAL POSITION FUNCTIONS:
Leadership
<ul><li>Demonstrates leadership in ethical and practical compliance to enhance institutional trust, strengthen reputation, and support risk-informed decision-making.
</li><li>Promotes ethical business practices across the College by providing comprehensive education and establishing procedures to achieve the highest standards of compliance.
</li><li>Maintains the College&rsquo;s goals, culture, data collection, data storage, data processing, and data reported.
</li><li>Recommends programmatic and technical strategies, demonstrating a high level of independence in conducting investigations while upholding confidentiality and assessing the impact and analysis of security incidents, as well as making informed decisions regarding risk management and implementing computer and network security measures.
</li></ul>Cybersecurity
<ul><li>Establishes and maintains the College&rsquo;s cybersecurity governance model, including policies, standards, risk oversight, and performance reporting to senior leadership.
</li><li>Develops and maintains security metrics and dashboards (risk posture, compliance status, control health, vulnerability trends, training completion, and audit remediation status).
</li><li>Provides senior level guidance on cybersecurity priorities and risk acceptance decisions while communicating risk in clear business terms.
</li></ul>Risk
<ul><li>Leads the development and implementation of the system-wide risk management function of the information security program to ensure information security risks are identified and monitored.
</li><li>Internally assesses, evaluates and makes recommendations to management regarding the adequacy of the security controls for the College's information and technology systems.
</li></ul>Compliance
<ul><li>Leads the system-wide information security compliance program, ensuring IT activities, processes, and procedures meet defined requirements, policies and regulations.
</li><li>Develops and implements effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with relevant legislation and legal interpretation.
</li><li>Executes strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors, PCI DSS, FERPA, HIPAA, NIST 800-171,GDPR, and GLBA safeguards.
</li></ul>Outreach / Awareness
<ul><li>Interacts in both oral and written communications with all levels of System staff including; computer support staff, developers and other ITS staff, Enrollment Services, Financial Aid, Instructional Design Services, Finance, General Counsel, MCC Police, auditors, and all system staff and students, technology vendors and contractors, in matters related to information security and security awareness materials.
</li><li>Coordinates cyber readiness and resilience activities with business continuity and disaster recovery planning, including recovery testing and restoration validation.
</li><li>Oversees governance for identity and access management (IAM) and privileged access controls in collaboration with IT teams, ensuring least privilege and compliance-driven access practices
</li><li>Develops strategies to address awareness and training for all stakeholders as well as technical solutions.
</li></ul>Audit
<ul><li>Works with College Financial office, and outside consultants as appropriate on required security assessments and audits.
</li><li>Coordinates and tracks all information technology and security related audits including scope of audits, colleges/units involved, timelines, auditing agencies and outcomes. Work with auditors as appropriate to keep audit focus in scope, maintain excellent relationships with audit. Provide guidance, evaluation and advocacy on audit responses.
</li><li>Consistently and dependably attends work, activities, and functions as scheduled or assigned.
</li></ul>KNOWLEDGE, SKILLS AND ABILITIES:
<ul><li>Knowledge of cybersecurity governance and risk management frameworks, including establishing strategy, roles, policies, and oversight.
</li><li>Knowledge of NIST CSF 2.0 and ability to implement and report using the six core functions: Govern, Identify, Protect, Detect, Respond, and Recover.
</li><li>Ability to lead incident management and coordination, including communication, mitigation, and continuous improvement.
</li><li>Knowledge and understanding of campus policy development and dissemination.
</li><li>Must be familiar with policies affecting the higher education environment in the following areas of Student Privacy, Health Care, Finance, Institutional Research and State/Federal Regulations.
</li><li>Possess skills needed to assess computer hardware, software, and network systems for security risks or violations and work with ITS and campus staff and technology vendors to recommend solutions.
</li><li>Excellent interpersonal, communication, and presentation skills, including formal report writing.
</li><li>Possess strong customer service skills and the ability to project that attitude to customers in remote locations.
</li><li>Ability to assess the status of complex multi-location projects as well as identify and implement appropriate corrective measures to resolve issues as they arise.
</li><li>Ability to operate with a high degree of independence with regard to project management activities, including development of project plans and budget/resource estimates that align with mission.
</li><li>Ability to develop security standards and guidelines based on best practices and industry standards.
</li><li>Ability to effectively work and interact with various cultures and ethnicities.
</li></ul>MINIMUM QUALIFICATIONS FOR EDUCATION AND EXPERIENCE:
<ul><li>Bachelor&rsquo;s Degree in Information Technology or related field.
</li><li>Seven (7) years of full-time related work experience to include communicating, analyzing and responding to information security incidents.
</li><li>Experience planning and managing projects required.
</li><li>Information security experience in a higher education or state/local government environment preferred.
</li><li>CISM or CISSP preferred.
</li><li>Equivalent combination of education and/or work experience considered.
</li><li>Must pass a background check.
</li></ul>The specific statements shown in each section of this description are not intended to be all inclusive. They represent typical elements and criteria considered necessary to perform the job successfully. Metropolitan Community College recognizes that an individual with a disability may require an accommodation to enable the candidate to successfully perform a job function. Consideration will be given to reasonable accommodations .</div>

Director of IT Cybersecurity, Risk and Compliance

NTT DATA

<div>Req ID: 356626
 
 
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. 
 
We are currently seeking a Risk &amp; Compliance Senior Director Consulting Practice Lead to join our team in New York, New York (US-NY), United States (US). 
 
Our Risk &amp; Compliance Consulting team is composed of seasoned management consultants who help clients across industries navigate today's complex risk management and compliance landscape. We support organizations in protecting institutional assets, enhancing operational efficiency, and mitigating threats to business profitability. Our practice specializes in operational risk management, internal and external compliance, financial crimes prevention, and digital fraud solutions. 
 
As a Senior Director Practice Lead, you will serve as a strategic leader within our growing practice. You'll work hands-on with clients-ranging from top U.S. banks and global payment providers to leading wealth management firms-to help them achieve their digital, data, and transformational goals. With NTT DATA's global footprint, you'll have the opportunity to engage in impactful work across industries and potentially across countries. This is a highly visible leadership role with opportunities to shape offerings, develop thought leadership, drive practice growth, and establish long-term client relationships. 
 
Responsibilities: 
<ul><li>
Lead, manage, and grow the Risk &amp; Compliance consulting practice.</li><li>
Oversee the delivery of the largest and most complex client engagements.</li><li>
Collaborate with executive leadership to set organizational strategy and business objectives.</li><li>
Influence long-term strategic focus and drive both tactical and transformational change.</li><li>
Serve as a trusted advisor to executive stakeholders, providing expert-level consulting and subject matter expertise.</li><li>
Deliver thought leadership and innovative, leading-edge consulting solutions.</li><li>
Guide clients on business strategy, technology strategy, and prioritization based on industry trends.</li><li>
Build and maintain strong relationships with C-suite executives in targeted organizations.</li><li>
Contribute to solution development and strategic decision-making across the organization.</li></ul> 

Qualifications: 
<ul><li>
15+ years of experience in Risk &amp; Compliance, including direct business development, client relationship management, and talent development.</li><li>
8+ years of experience in a Management Consulting firm (Big 4 preferred) with strong customer engagement and delivery oversight.</li><li>
5+ years' experience:</li><li><ul><li>
Credit experience in at least one of the following areas:</li><li><ul><li>
Institutional, Corporate, or Commercial credit across all products</li><li>
Commercial, Corporate &amp; Markets Loan Workout across major credit cycles</li><li>
Risk appetite, governance, and limits management</li><li>
Fraud, waste, and abuse</li></ul></li><li>
Data and customer privacy</li><li>
Personal credit signing authority</li></ul></li><li>
Enterprise Risk Management experience, including:</li><li><ul><li>
Designing and executing risk management frameworks (including regulatory remediation)</li></ul></li><li>
Risk identification across operational, reputational, financial crime, and compliance domains</li><li>
Financial crimes, fraud, risk, and resilience</li><li>
5 + years of Risk experience in one or more of the following segments:</li><li><ul><li>
Banking &amp; Financial Services</li><li>
Life Sciences</li><li>
Healthcare</li><li>
Manufacturing</li><li>
Commercial/Consumer sectors</li></ul></li><li>
Bachelor's degree in business or a related discipline.</li></ul> 

Preferred Skills: 
<ul><li>
Experience working with global, cross-functional teams.</li><li>
Product design and configuration expertise.</li><li>
Graduate degree (MBA, MS, JD) preferred but not required.</li></ul> 

Why Join Us? 
<ul><li>
Opportunity to build and lead a high-impact consulting practice.</li><li>
Work with top-tier clients in financial services and beyond.</li><li>
Exposure to diverse projects and global collaboration.</li><li>
A culture that values innovation, leadership, and continuous learning.</li></ul> 
#LI-NorthAmerica 
 
About NTT DATA 
 
NTT DATA is a recognized leader in IT and business services, including cloud, data and applications, headquartered in Texas. As part of NTT DATA, a $30 billion trusted global innovator with a combined global reach of over 80 countries, we help clients transform through business and technology consulting, industry and digital solutions, applications development and management, managed edge-to-cloud infrastructure services, BPO, systems integration and global data centers. We are committed to our clients' long-term success. Visit nttdata.com or LinkedIn to learn more. 
 
NTT DATA is an equal opportunity employer and considers all applicants without regarding to race, color, religion, citizenship, national origin, ancestry, age, sex, sexual orientation, gender identity, genetic information, physical or mental disability, veteran or marital status, or any other characteristic protected by law. We are committed to creating a diverse and inclusive environment for all employees. If you need assistance or an accommodation due to a disability, please inform your recruiter so that we may connect you with the appropriate team. 
 
Where required by law, NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this remote role is $216,405 - 480,900. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate's actual work location, relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance. 
 
This position is eligible for company benefits that will depend on the nature of the role offered. Company benefits may include medical, dental, and vision insurance, flexible spending or health savings account, life and AD&amp;D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits.</div>

Risk & Compliance Senior Director Consulting Practice Lead

New York University

Position Summary: The Associate Director, Application Risk &amp; Compliance, provides strategic oversight and defines the validation and risk management frameworks required to ensure the security, data privacy, and integrity of the NYU enterprise application ecosystem in alignment with best practices and NYU&rsquo;s Global Information Security Program. Act as a primary partner to Institutional Solutions Group (ISG) application portfolio leads, ensuring that application ecosystems, controls, and processes are aligned with University policies, standards, and procedures. Operationalize and oversee the implementation of application security and data privacy controls, identifying and assessing potential security and privacy risks across diverse technology stacks to ensure an integrated approach to risk management. Develop and implement standardized playbooks, templates, and tools to improve application security and data privacy effectiveness. Validate that required controls are effectively in place across all ISG application portfolios. Aggregate risk data and provide comprehensive compliance reports and dashboards to executive leadership. Serve as a consultant and partner to application portfolio leads, facilitating the delivery of secure foundations through proactive collaboration. Serve as a liaison between the Global Office of Information Security (GOIS) and application teams to facilitate the system certification process, ensuring all systems and applications consistently enforce institutional standards throughout their lifecycle. Qualifications: Required Education: 
Bachelor's Degree in Computer Science, Business, or related major 
 
Preferred Education: 
Master's Degree in Computer Science, Business or related field 
 
Required Experience: 
5+ years of progressive experience in information security, IT risk management, or IT compliance. Direct experience with secure software development lifecycles (S-SDLC), application security frameworks, and technical vulnerability management (e.g., OWASP Top 10). Proven history of conducting IT risk assessments, developing risk mitigation strategies, and overseeing compliance against institutional or federal standards. Experience operationalizing data protection standards and interpreting privacy regulations such as GDPR, HIPAA, or FERPA in a technical environment. 
 
Preferred Experience: 
Significant experience in higher education or in a large, distributed, and global organization. Experience serving as a primary security or compliance liaison for multiple diverse technical portfolios. Significant experience in higher education or in a large, distributed, and global organization. 
 
Required Skills, Knowledge and Abilities: 
Deep understanding of applications security risks (OWASP Top 10), secure software development lifecycles, secure application integration standards, and common vulnerabilities across modern (cloud-native, AI-integrated) and legacy application stacks. Proficiency in modern identity and access management standards. Experience establishing automated 'Joiner-Mover-Leaver' workflows and centralized access review processes. Strong ability to interpret federal and state regulations (e.g., FERPA, HIPAA, GDPR) and translate them into actionable technical controls for application developers. Demonstrated ability to act as a consultative partner to technical leads while effectively presenting risk-based data and dashboards to non-technical executive leadership. Technical proficiency in leveraging CI/CD security integrations and automation tools to automate and simplify compliance for distributed teams. Proven ability to balance security requirements with business speed, using sound judgment to determine when to grant a waiver versus when to escalate a 'blocker' to leadership. Demonstrated ability to think strategically. Must be able to work well in a changing, ambiguous environment and practice creative problem-solving. Possess effective verbal and written communication skills. Demonstrated public speaking ability. Skilled at stakeholder and audience engagement at multiple levels. Demonstrated ability to excel in a fast-paced environment with competing priorities, while remaining flexible and proactive. Ability to accurately and consistently meet deadlines. Ability to build consensus among diverse constituencies. Ability to work effectively with technical teams to achieve desired outcomes. Ability to demonstrate tact and diplomacy in difficult situations. Demonstrated ability to work effectively with a diverse population within a multicultural environment. Established experience in information systems operational strategies by evaluating trends; establishing critical measurements, determining productivity, quality, and customer service strategies. 
 
Preferred Skills, Knowledge and Abilities: 
Advanced professional credentials such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC). Deep technical familiarity with secure coding practices and emerging technologies like AI and cloud-native security. Familiarity with GitHub Advanced Security (GHAS) features, including CodeQL, Secret Scanning, and Dependabot. Ability to configure GitHub Actions to automate security testing and enforce policy-as-code requirements within the developer workflow. 
Additional Information: In compliance with NYC's Pay Transparency Act, the annual base salary range for this position is USD $175,000.00 to USD $195,000.00. New York University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. This pay range represents base pay only and excludes any additional items such as incentives, bonuses, clinical compensation, or other items.
 
 
NYU aims to be among the greenest urban campuses in the country and carbon neutral by 2040. Learn more at nyu.edu/nyugreen. 
 
NYU is an Equal Opportunity Employer and is committed to a policy of equal treatment and opportunity in every aspect of its recruitment and hiring process without regard to age, alienage, caregiver status, childbirth, citizenship status, color, creed, disability, domestic violence victim status, ethnicity, familial status, gender and/or gender identity or expression, marital status, military status, national origin, parental status, partnership status, predisposing genetic characteristics, pregnancy, race, religion, reproductive health decision making, sex, sexual orientation, unemployment status, veteran status, or any other legally protected basis. All interested persons are encouraged to apply at all levels.

Associate Director, Application Risk and Compliance

Nscale

<div>
 
 About Nscale
 
 
 
 Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.
 
 
 We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you'll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you'll be contributing to building the technology that powers the future.
 
 
 
 About the Role (Job Purpose)
 
 
 
 Nscale is seeking a Director, Security Risk &amp; Compliance to lead our global security governance, risk, compliance, and customer assurance programs.
 
 
 Reporting to the CISO, this executive will be responsible for enterprise security risk management, issue management, regulatory compliance, certifications, policy governance, security awareness, data governance, and customer trust.
 
 
 This is a highly strategic role at the center of Nscale's enterprise growth. As we sign large enterprise and regulated customers with significant security requirements, this leader will ensure Nscale's security posture meets &mdash; and exceeds &mdash; global standards while enabling business velocity.
 
 
 
 Please apply only if you have hands-on experience designing and implementing AI-driven cybersecurity programs, and can demonstrate prior work (e.g., case studies, architectures, or deployed solutions).
 
 
 
 
 What You'll be Doing (Responsibilities)
 
 
 
 
 Security Risk &amp; Governance
 
 
 
 <ul>
 <li>
 Establish and lead Nscale's global security risk management framework aligned to NIST Cybersecurity Framework (CSF) and international best practices.
 </li>
 <li>
 Maintain enterprise risk registers and oversee issue identification, tracking, and remediation.
 </li>
 <li>
 Develop and report security KPIs, KRIs, and board-level metrics.
 </li>
 <li>
 Drive structured governance processes across engineering, infrastructure, and corporate functions.
 </li>
 <li>
 Ensure continuous improvement across Identify, Protect, Detect, Respond, and Recover domains.
 
 
 </li>
 </ul>
 
 Compliance &amp; Certifications
 
 
 
 <ul>
 <li>
 Oversee global compliance programs including ISO 27001, SOC 2, NIST CSF, NIS2, Cyber Essentials Plus, and other applicable regulatory frameworks.
 </li>
 <li>
 Lead certification efforts, surveillance audits, and recertifications.
 </li>
 <li>
 Ensure technical controls are mapped and aligned across ISO, SOC 2, and NIST CSF domains.
 </li>
 <li>
 Anticipate and prepare for evolving regulatory requirements across North America, EMEA, and APAC.
 
 
 </li>
 </ul>
 
 Customer Trust &amp; Deal Support
 
 
 
 <ul>
 <li>
 Own the security component of enterprise deal enablement.
 </li>
 <li>
 Support RFPs, security questionnaires, and customer due diligence assessments.
 </li>
 <li>
 Engage directly with enterprise security and risk teams during negotiations.
 </li>
 <li>
 Develop standardized trust materials (security whitepapers, control matrices,
 </li>
 <li>
 assurance packages).
 
 
 </li>
 </ul>
 
 Policy Management &amp; Assurance
 
 
 
 <ul>
 <li>
 Oversee security policy development, lifecycle management, and governance alignment to NIST CSF and ISO controls.
 </li>
 <li>
 Ensure policies are operationalized, measurable, and auditable.
 </li>
 <li>
 Lead internal control testing, assurance reviews, and continuous monitoring activities.
 </li>
 <li>
 Coordinate cross-functional remediation efforts.
 
 
 </li>
 </ul>
 
 Training &amp; Awareness
 
 
 
 <ul>
 <li>
 Develop and scale global security awareness and role-based training programs.
 </li>
 <li>
 Foster a culture of shared security ownership across engineering and corporate teams.
 
 
 </li>
 </ul>
 
 Data Governance &amp; Privacy Alignment
 
 
 
 <ul>
 <li>
 Partner with Legal, Product, and Engineering to mature data governance frameworks.
 </li>
 <li>
 Oversee data classification, handling standards, retention, and cross-border data controls.
 </li>
 <li>
 Align governance practices with regulatory and enterprise customer expectations.
 
 
 </li>
 </ul>
 
 Leadership &amp; Cross-Functional Partnership
 
 
 
 <ul>
 <li>
 Build and lead a high-performing global GRC and assurance organization.
 </li>
 <li>
 Partner closely with Engineering, Product, Legal, Sales, Finance, and Executive Leadership.
 </li>
 <li>
 Contribute to overall security strategy in partnership with the CISO.
 
 
 </li>
 </ul>
 
 About You (Skills / Qualifications)
 
 
 
 
 Required
 
 
 
 <ul>
 <li>
 15+ years of experience in security risk management, compliance, or governance leadership.
 </li>
 <li>
 Experience leading global compliance programs in cloud, infrastructure, SaaS, or regulated environments.
 </li>
 <li>
 Deep familiarity with NIST CSF, ISO 27001, SOC 2, and NIS2, and experience mapping controls across multiple frameworks.
 </li>
 <li>
 Experience supporting enterprise sales cycles and large-customer security due diligence.
 </li>
 <li>
 Demonstrated ability to build scalable risk and issue management programs.
 </li>
 <li>
 Experience presenting security risk and compliance posture to executive leadership and boards.
 
 
 </li>
 </ul>
 
 Nice to Have
 
 
 
 <ul>
 <li>
 Experience in AI, GPU, cloud, or infrastructure platforms.
 </li>
 <li>
 Background in regulated industries or critical infrastructure.
 </li>
 <li>
 Experience operating across North America, EMEA, and APAC.
 </li>
 <li>
 Professional certifications (e.g., CISSP, CISM, CRISC, ISO Lead Auditor).
 
 
 </li>
 </ul>
 
 What We Can Offer You
 
 
 
 At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core.
 
 
 <ul>
 <li>
 Highly competitive package (base + equity) with reviews every 12 months. 🚀
 </li>
 <li>
 Join the fastest-growing tech startup, your chance to push boundaries, collaborate with brilliant minds, and make your mark on cutting-edge AI. ✨
 </li>
 <li>
 Expect a dynamic progression plan tailored to your ambitions. Grow by trying new things, leading, challenging the status quo, and owning your impact, always with our full support.
 </li>
 <li>
 Human-First Flexibility: We treat you as humans first. 🫶🏽 Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments.
 </li>
 <li>
 Join our thriving remote-first team. Geography is no barrier to impact or connection. We build seamless virtual collaboration, empowering you, wherever you work.
 
 
 </li>
 </ul>
 
 Equal Opportunities Statement
 
 
 
 We strongly encourage applications from people of color, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds.
 
 
 If there's anything we can do to accommodate your specific situation, please let us know.
 
 
 The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role.
 
 
 
 For information on how Nscale handles candidate personal data, please see our Employee &amp; Candidate Privacy Notice: Here.
 
</div>

Director, Security Risk & Compliance

Openkyber

<div>IoT-AUTO- Project Manager / Scrum Master with Data or Analytics (Data Centric ) exp required, with Manufacturing Industry exp is preferred - Dallas TX - Locals only 4 + months contract Description: We are seeking an experienced Project Manager / Scrum Master to lead and deliver data-centric projects across our organization. This role combines strong project management and Agile expertise with hands-on experience coordinating data engineering, analytics, cloud, and integration teams. The ideal candidate can drive cross-functional execution, ensure timely delivery, and communicate effectively with both technical and business stakeholders.
Key Responsibilities Project Management &amp; Delivery:
<ul><li>Lead end-to-end project delivery for data engineering, data platform, analytics, and governance initiatives.</li>
<li>Develop and manage project plans, timelines, budgets, scopes, and risks.</li>
<li>Coordinate dependencies across data, engineering, cloud, product, and business teams.</li>
<li>Ensure successful delivery of data pipelines, migrations, dashboards, integrations, and cloud platform enhancements.</li>
</ul>Scrum Master Responsibilities:
<ul><li>Facilitate Agile ceremonies: daily standups, sprint planning, grooming, retrospectives, and demos.</li>
<li>Coach teams on Agile best practices and foster a high-performing, collaborative environment.</li>
<li>Remove impediments and ensure smooth sprint execution.</li>
<li>Track team velocity, sprint progress, and process improvements.</li>
</ul>Stakeholder Management:
<ul><li>Work closely with business owners, data leads, analysts, and executives to gather requirements and ensure alignment.</li>
<li>Communicate project status, risks, and dependencies clearly and proactively.</li>
<li>Manage expectations and ensure transparency around scope and timelines.</li>
<li>Bridge the gap between technical teams and business functions.</li>
</ul>Data Project Coordination:
<ul><li>Understand data concepts such as ETL/ELT, data quality, reporting, data lakes/warehouses (no hands-on coding required).</li>
<li>Work with data engineers and architects to ensure technical feasibility and accurate estimation.</li>
<li>Oversee data validation, UAT cycles, and production readiness activities.</li>
<li>Ensure data governance, privacy, and compliance considerations are included in project workflows.</li>
</ul>Continuous Improvement &amp; Governance:
<ul><li>Promote standard PMO practices, documentation, and project governance frameworks.</li>
<li>Identify process improvement opportunities across teams and drive adoption.</li>
<li>Support capacity planning, resource management, and cross-team coordination.</li>
</ul>Required Skills &amp; Experience Project &amp; Agile Skills:
<ul><li>5+ years of project management experience, with at least 2+ years managing data or analytics projects.</li>
<li>Strong knowledge of Agile/Scrum methodologies and best practices.</li>
<li>Proven ability to deliver complex, multi-team data or cloud projects.</li>
<li>Experience managing distributed and cross-functional teams.</li>
</ul>Technical &amp; Domain Knowledge:
<ul><li>Good understanding of data platforms, data pipelines, cloud environments (AWS/Azure/Google Cloud Platform), and BI/reporting tools.</li>
<li>Ability to interpret technical concepts and translate them into business language.</li>
<li>Familiarity with tools such as Jira, Confluence, MS Project, Smartsheet, or equivalent.</li>
</ul>Soft Skills:
<ul><li>Excellent communication, presentation, and documentation skills.</li>
<li>Strong stakeholder management and conflict-resolution abilities.</li>
<li>Highly organized, detail-oriented, and proactive in identifying risks and issues.</li>
<li>Ability to work in a fast-paced, dynamic environment.</li>
</ul>Preferred Qualifications:
<ul><li>Certified Scrum Master (CSM), PMI-ACP, PMP, or equivalent certifications.</li>
<li>Experience in data modernization, cloud data platform implementation, or enterprise analytics programs.</li>
<li>Experience in regulated industries (finance, healthcare, insurance) is a plus.</li>
</ul>Deliverables :
<ul><li>Process Flows</li>
<li>Mentor and Knowledge transfer to client project team members</li>
<li>Participate as primary, co and/or contributing author on any and all project deliverables associated with their assigned areas of responsibility</li>
<li>Participate in data conversion and data maintenance</li>
<li>Provide best practice and industry specific solutions</li>
<li>Advise on and provide alternative (out of the box) solutions</li>
<li>Provide thought leadership as well as hands on technical configuration/development as needed.</li>
<li>Participate as a team member of the functional team</li>
<li>Perform other duties as assigned.</li>
</ul>For applications and inquiries, contact: hirings@openkyber.com</div>

Risk Analytics Lead

Rentokil North America

<div>Benefits Start Day 1 for Full-Time Colleagues - No Waiting Period!
For more information about our benefits, see below!
We are proud to be a member of the Rentokil family of companies, the global leader in Pest Control and other services across more than 90 countries. We pride ourselves on being a trusted partner to many of the world's leading brands and serve consumer and business customers across multiple industries. We are extremely proud of our legacy of excellence and constantly work to fulfill our mission to &quot;protect people, enhance lives, and preserve the planet.&quot;
Overview
The Head of GRC (Governance, Risk &amp; Compliance) for North America is responsible for the strategic execution of regulatory compliance and risk management frameworks. Reporting directly to the NA CIO, this leader owns the regional risk posture and ensures that North American operations are fully aligned with global standards while meeting stringent local mandates. This role is the primary custodian of IT General Controls, SOX, and PCI-DSS governance, ensuring the business remains audit-ready and resilient against emerging threats.
Duties &amp; Responsibilities<h3 class="jobSectionHeader">
Core Governance &amp; Strategic Oversight</h3><ul><li>
Master Risk Accountability: Own and manage the central North American repository for all IT Audit, Risk, and Compliance actions. Drive the end-to-end accountability loop to ensure findings are not just identified, but remediated on schedule.</li><li>
Best-in-Class ITGC Program: Lead the development, execution, and continuous maturation of a &quot;best-in-class&quot; IT General Controls (ITGC) program, ensuring proactive mitigation of financial, operational, and cyber risks.</li><li>
Global Standard Influence: Actively shape best practices and standards by ensuring North America&rsquo;s unique regulatory and operational perspectives are integral to the Group strategic direction.</li><li>
Audit Interface Leadership: Serve as the primary, authoritative interface for all third-party auditors, Group Internal Audit, and regulatory bodies (PCI, SOX). Ensure a globally consistent audit approach and maintain absolute transparency in reporting.</li><li>
Enterprise Risk Integration: Direct the identification, assessment, and prioritization of IT and Cyber risks, ensuring they are quantified and seamlessly integrated into the broader North American Enterprise Risk Management (ERM) framework.</li></ul><h3 class="jobSectionHeader">
Regulatory &amp; Compliance Ownership</h3><ul><li>
PCI-DSS &amp; SOX Custodian: Own end-to-end regional compliance for PCI-DSS (Payment Card Industry) and SOX (Sarbanes-Oxley). Ensure all financial and payment systems meet strict audit requirements without exception.</li><li>
Policy Enforcement: Localize and execute the global cyber security roadmap. Establish regional policies that bridge the gap between global requirements and local North American legal/mandated requirements.</li><li>
Security Service Transition: Own the security &quot;gatekeeping&quot; process for new technology. Ensure that any new business tool or system undergoes rigorous security testing and risk assessment before entering the production environment.</li></ul><h3 class="jobSectionHeader">
Cyber Security Operations &amp; Resilience</h3><ul><li>
Incident Leadership: Serve as the lead coordinator for security incident response (IR). Own the communication bridge between technical containment teams and executive leadership (Legal, Finance, HR).</li><li>
Executive Resilience Testing: Plan and execute regular tabletop activities and simulations for Executive Leadership Team (ELT) members to test and mature incident response capabilities.</li><li>
Cross-Functional Posture Improvement: Coordinate proactively with technology and business teams to improve the overall security posture and drive measurable risk reduction across the North American region.</li><li>
Field Education &amp; Awareness: Drive a targeted field education strategy to build awareness and understanding of current risks and vulnerabilities among all relevant operational teams.</li><li>
Threat &amp; Vulnerability Oversight: Manage the regional vulnerability management program. Use the &quot;Master Risk Register&quot; to force-rank and drive the patching of critical infrastructure.</li><li>
Security Culture &amp; Awareness: Design and lead regional security training programs to foster a &quot;security-first&quot; culture, moving beyond compliance check-boxes to behavioral change.</li><li>
Third-Party Risk Management: Oversee the security evaluation of all regional third-party vendors and partners to mitigate supply chain risks.</li></ul> 
Candidate Requirements
Education
Bachelor&rsquo;s Degree (Required): Typically in Computer Science, Information Technology, Cybersecurity, or a related STEM field.
Experience<ul><li>
Experience: 12+ years of progressive experience in Cyber Security, Information Security, or IT Risk Management.</li><li>
Compliance Expertise: Proven track record of managing PCI-DSS (Level 1 or 2 environments) and SOX ITGC frameworks in a complex corporate setting.</li><li>
Leadership: Minimum of 5 years in a senior leadership role managing multi-disciplinary security teams.</li></ul>
Skills &amp; Competencies<ul><li>
Technical Depth: Deep understanding of network security, cloud security (AWS/Azure/GCP), and encryption standards.</li><li>
Certifications: (Preferred) CISSP, CISM, CISA, or PCIP.</li><li>
Soft Skills: Exceptional ability to communicate technical risks to non-technical stakeholders (Legal, Finance, Executive Board).</li></ul>
Physical Demands and Working Conditions (do not edit)
The physical demands are representative of those that must be met by an employee to perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Incumbent must be prepared to:<ul><li>
Move up to 10 pounds occasionally, by lifting, carrying, pushing, pulling, or otherwise repositioning objects.
</li><li>Sitting for long periods of time while using office equipment such as computers, phones and etc.</li><li>
Performing repetitive motions involving the wrists, hands, and fingers, such as typing, picking, and pinching, within your regular work environment.</li><li>
Express or exchange ideas with others through the use of spoken word, quickly, accurately, and at an easily audible volume, and receive detailed information through oral communication at usual speaking levels without correction, and/or make fine discriminations in the nature of sounds in the environment.</li></ul>
Incumbent is required to have:<ul><li>
Near-range visual acuity for detailed tasks and ability to perform activities with precision such as analyzing data, viewing computer screens or reading extensively.</li></ul>
Incumbent will be subject to:<ul><li>
Inside working conditions: The change of building environment such as with or without air conditioning and heating.</li></ul>
Our companies are proud to be Affirmative Action (AA) and Equal Opportunity Employers (EOE) inclusive of veterans and those with disabilities.
Disclaimer
The above statements are intended to describe the general nature and level of work being performed by colleagues assigned to this position. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of colleagues so classified. All colleagues may be required to perform duties outside of their normal responsibilities from time to time, as needed.
Why Choose Us? 
 
A career with the Rentokil family of companies can be a professional trajectory filled with opportunity. We pride ourselves on being a world-class team that rewards high performance, and we love to promote from within. We offer competitive pay and many of our roles offer performance incentives. 
 
Below you'll find information about some of what we have to offer. All Full-Time Colleagues qualify for the following and Part-Time Colleagues qualify for most benefits after they meet certain criteria. 
 
Click here to read more about our Total Rewards Program which includes: 
 
Professional and Personal Growth<ul><li>
Multiple avenues to grow your career</li><li>
Training and development programs available</li><li>
Tuition Reimbursement benefits (for FT Colleagues)</li></ul> 
Health and Wellness<ul><li>
Full-time colleagues are eligible to begin enrollment immediately upon hire with benefits starting on day 1</li><li>
Health benefits including Medical, Dental, Vision, Disability, and Life Insurance plus much more</li></ul> 
Savings and Retirement<ul><li>
401(k) retirement plan with company-matching contributions
</li></ul>Work-Life Balance<ul><li>
Vacation days &amp; sick days</li><li>
Company-paid holidays &amp; floating holidays</li><li>
A company mindset that prioritizes health, safety, and flexibility</li></ul> 
We are looking for individuals who want to make a difference where our customers live and work. Is that you? 
This company is a Drug Free workplace.
Rentokil is committed to complying with all Federal, State, and local laws related to the employment of qualified individuals with disabilities.
California residents click here to review your privacy rights.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
By applying to this job, you agree to receive initial texts from systems used on behalf of Rentokil North America, Inc., possibly including Workday, Loop, and HireVue. These systems utilize text messages to communicate with you throughout the application, interview, and pre-hire processes. You can set your communication preferences or opt out of text messages from each system at any time following the initial message. Message and data rates may apply.</div>

Sr Director, IT Governance, Risk & Compliance, North America

Crane Company

<div>The Senior IT Governance, Risk &amp; Compliance (GRC) professional is responsible for establishing, overseeing, and continuously improving the organization&rsquo;s IT governance framework to ensure alignment with business objectives, regulatory requirements, and industry best practices. This role leads enterprise ‑ wide IT risk management, compliance, and control activities, including policy ownership, control design, risk assessments, audit coordination, and remediation oversight across business units and technology domains. Acting as a trusted advisor to IT leadership, business stakeholders, and audit partners, the Senior IT GRC role drives consistency, accountability, and transparency in how IT risks are identified, managed, and reported, while supporting compliance with regulatory, contractual, and internal control requirements in a complex, decentralized environment.
Responsibilities and Duties:
<ul><li>Identify, monitor, and support activities responsible for validating the effectiveness of IT security, governance, risk, and compliance programs.
</li><li>Support alignment between IT and audit activities while ensuring adherence to adopted standards, frameworks, and methodologies.
</li><li>Evolve the enterprise IT GRC roadmap, driving continuous improvement in governance maturity, risk visibility, and control effectiveness across the organization.
</li><li>Develop and provide guidance for advisory reviews related to system implementations, technology strategies, mergers and acquisitions, fraud events, and service interruptions.
</li><li>Contribute to a sustainable IT general control environment through involvement in key IT internal control and governance activities.
</li><li>Coordinate with Business Units to align controls with enterprise IT policies, standards, trends, and best practices.
</li><li>Support internal and external audit activities related to IT governance by assisting with policies, narratives, evidence expectations, and self-assessment documentation.
</li><li>Participate in IT risk assessment activities, including third party and service provider risk reviews, and contribute to broader risk management, compliance, and internal control initiatives as needed.
</li><li>Serve as a subject matter resource to support the identification and assessment of IT risks and to improve the effectiveness and efficiency of IT controls.
</li><li>Identify and recommend opportunities for improved governance processes and technology-based tools to support risk mitigation and compliance oversight.
</li><li>Support the development and maintenance of enterprise IT governance policies, standards, procedures, and control requirements to assure compliance with applicable regulatory, audit, and contractual obligations, as well as sound business practices.
</li><li>Review Business Unit certifications and submissions, identify variances, and support the development of remediation actions in coordination with BU leadership.
</li><li>Support formal IT risk analysis and self‑assessment activities for systems, processes, and services, including global asset risk and obsolescence considerations.
</li><li>Contribute to continuity governance and risk mitigation activities related to disaster recovery, backup and recovery practices, and system lifecycle management.
</li><li>Support the development, implementation, and monitoring of compliance oversight activities related to ITAR/DFARS, PCI, data privacy regulations (e.g., GDPR, CCPA), and contractual, licensing, and usage requirements, where governance remains centralized.
</li><li>Liaise with Internal Audit, Corporate Compliance, Legal, and Business Unit IT leadership to support IT governance, risk, and compliance initiatives and audit activities.
</li><li>Monitor IT‑related regulatory, compliance, and legal trends and support the communication of relevant impacts and expectations across the organization.
</li><li>Assist with training and awareness activities for IT staff and Business Units related to IT governance, risk management, and compliance expectations, as needed.
</li></ul>Qualifications and Competencies:
<ul><li>Bachelor&rsquo;s degree in a related field such as Computer Science, Information Technology, or a related discipline.
</li><li>5 + years of experience in an IT GRC or related field required.
</li><li>Risk‑ or audit‑related professional certifications preferred, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT), or Certificate of the Business Continuity Institute (CBCI), or equivalent demonstrated experience.
</li><li>Demonstrated experience supporting compliance with Sarbanes‑Oxley (SOX) IT General Controls, including control design, testing coordination, evidence management, and remediation oversight in partnership with Internal and External Audit.
</li><li>Proven knowledge of DFARS and ITAR regulatory requirements as they apply to information systems, data protection, access controls, and service providers, with experience supporting assessments, contractual requirements, and control enforcement across business units.
</li><li>Demonstrated experience supporting enterprise data privacy programs, including the interpretation and application of global privacy regulations such as GDPR and CCPA, participation in data privacy impact assessments (DPIAs), and oversight of privacy‑related controls within IT governance frameworks.
</li><li>Proven ability to partner with Legal, Information Security, Internal Audit, and business stakeholders to assess privacy risks, support contractual and vendor privacy requirements, and ensure appropriate handling, protection, and retention of personal data across systems and service providers.
</li><li>Demonstrated experience providing governance, risk, and compliance oversight for IT resiliency, backup, and recovery programs, including policy development, control definition, risk assessments, and validation of recovery readiness.
</li><li>Proven ability to oversee backup and disaster recovery control effectiveness, including immutability, retention, encryption, and restoration testing, while coordinating evidence, certifications, and remediation activities with Business Units, Information Security, and Internal Audit.
</li><li>Experience operating within a centralized model while enabling consistent execution and compliance across decentralized business units.
</li><li>Experience or working knowledge of IT governance and compliance frameworks such as COSO, ISO 27001, PCI‑DSS, COBIT, and ITIL.
</li><li>Strong analytical and assessment skills with experience supporting IT risk assessments, audits, or compliance activities across a variety of technologies and platforms.
</li></ul>This description has been designed to indicate the general nature and level of work being performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.
Crane Company. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, gender, sexual orientation, general identity, national origin, disability or veteran status.</div>

Sr. Analyst, IT Governance, Risk & Compliance

Search 10000+ Risk and compliance analytics director jobs near you this March. New roles added regularly across leading industries. Apply today.