IT Risk & Governance Consultant

Anblicks; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Anblicks is seeking an experienced IT Risk and Governance professional to serve as the onshore delivery anchor for a large-scale control testing automation programme. You will collaborate with client Risk, Compliance, and Internal Audit teams to map control requirements to data and translate them into testable controls.

The role emphasizes hands-on discovery, data mapping, and close coordination with the technical team to ensure regulatory alignment and robust control implementation across the

Qualifications

• 10+ years in IT Risk & Governance, or GRC.
• Strong knowledge of SOX ITGC and NYDFS.
• Experience with data mapping and control automation.
• Experience in control testing, risk assessment, and audit.
• Azure knowledge and data warehouse concepts.
• Familiarity with ITSM and PAM tools.

Responsibilities

• Act as the onshore point of contact for client Risk and Governance stakeholders.
• Lead discovery sessions and walkthroughs with client SMEs.
• Identify source systems and understand the controls and data available in each system.
• Define control-to-data requirements and source-to-target mappings.
• Identify data gaps, access issues, and dependencies during discovery.
• Work with client stakeholders to define control thresholds and evaluation criteria.
• Help prioritize control domains and define the implementation sequence.
• Work with the technical team to translate control requirements into testable control logic.
• Review the solution design to ensure it aligns with regulatory and business requirements.
• Prepare discovery and implementation documentation.

Skills

IT Risk

Governance

SOX ITGC

NYDFS

Vulnerability Mgmt

PAM/IAM

Asset Mgmt

Data Mapping

Control Automation

Azure

Data Warehouse

ITSM

Identity Gov

Stakeholder Mgmt

Job description

We are looking for an experienced IT Risk and Governance professional who can work as the onshore delivery anchor for a large-scale control testing automation programme. The role will involve working closely with client Risk, Compliance, and Internal Audit teams, understanding the control requirements, mapping them to data, and working with the technical team to translate the requirements into testable controls.

Key Responsibilities

1. 1) Act as the onshore point of contact for client Risk and Governance stakeholders.
2. 2) Lead discovery sessions and walkthroughs with client SMEs.
3. 3) Identify source systems and understand the controls and data available in each system.
4. 4) Define control-to-data requirements and source-to-target mappings.
5. 5) Identify data gaps, access issues, and dependencies during discovery.
6. 6) Work with client stakeholders to define control thresholds and evaluation criteria.
7. 7) Help prioritize control domains and define the implementation sequence.
8. 8) Work with the technical team to translate control requirements into testable control logic.
9. 9) Review the solution design to ensure it aligns with regulatory and business requirements.
10. 10) Prepare discovery and implementation documentation.

Required Skills & Experience

1. 1) 10+ years of experience in IT Risk & Governance, Information Security Controls, or GRC.
2. 2) Strong knowledge of SOX ITGC, NYDFS, or similar regulatory frameworks.
3. 3) Good understanding of Vulnerability Management, Logical Access Controls (PAM/IAM), and Asset Management.
4. 4) Experience working with control testing, risk assessment, and audit requirements.
5. 5) Ability to understand regulatory requirements and convert them into practical control requirements.
6. 6) Experience working with data teams on data mapping, data requirements, and control automation.
7. 7) Working knowledge of Azure and enterprise data warehouse concepts.
8. 8) Familiarity with ITSM, Identity Governance, Vulnerability Management, and PAM tools.
9. 9)Strong client-facing and stakeholder management skills.
10. 10) Good communication and documentation skills.
11. 11) Consulting or vendor-side delivery experience is preferred.