IT Risk & Governance Consultant

Anblicks Inc.; Dallas, Northern (TX, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Anblicks Inc. is seeking an experienced IT Risk and Governance professional to serve as the onshore delivery anchor for a large-scale control testing automation program.

You will work closely with client Risk, Compliance, and Internal Audit teams to translate requirements into testable controls. The role requires deep regulatory knowledge (SOX ITGC, NYDFS), data mapping, and collaboration with data teams and vendors to drive risk-based control solutions.

Qualifications

• 10+ years of experience in IT Risk & Governance or GRC.
• Knowledge of SOX ITGC, NYDFS or similar regulatory frameworks.
• Strong understanding of Vulnerability Management, PAM/IAM, and Asset Management.
• Experience with control testing, risk assessment, and audits.
• Ability to translate regulatory requirements into practical controls.
• Experience with data mapping and data requirements for controls.
• Familiarity with Azure and enterprise data warehouse concepts.
• Experience with ITSM and Identity Governance tools.
• Strong client-facing and stakeholder management skills.
• Excellent communication and documentation abilities.
• Consulting or vendor-side delivery experience preferred.

Responsibilities

• Act as onshore contact for client Risk and Governance stakeholders.
• Lead discovery sessions with client SMEs.
• Identify source systems and available controls/data.
• Define control-to-data requirements and source-to-target mappings.
• Identify data gaps, access issues, and dependencies.
• Define control thresholds and evaluation criteria with stakeholders.
• Prioritize control domains and implementation sequence.
• Translate control requirements into testable control logic with the tech team.
• Review solution design for regulatory alignment.
• Prepare discovery and implementation documentation.

Skills

IT Risk & Governance

SOX ITGC

Vulnerability Management

PAM/IAM

Data mapping

Control automation

Azure

ITSM

Identity Governance

Stakeholder management

Communication & documentation

Job description

We are looking for an experienced IT Risk and Governance professional who can work as the onshore delivery anchor for a large-scale control testing automation programme. The role will involve working closely with client Risk, Compliance, and Internal Audit teams, understanding the control requirements, mapping them to data, and working with the technical team to translate the requirements into testable controls.

Key Responsibilities

• 1) Act as the onshore point of contact for client Risk and Governance stakeholders.
• 2) Lead discovery sessions and walkthroughs with client SMEs.
• 3) Identify source systems and understand the controls and data available in each system.
• 4) Define control-to-data requirements and source-to-target mappings.
• 5) Identify data gaps, access issues, and dependencies during discovery.
• 6) Work with client stakeholders to define control thresholds and evaluation criteria.
• 7) Help prioritize control domains and define the implementation sequence.
• 8) Work with the technical team to translate control requirements into testable control logic.
• 9) Review the solution design to ensure it aligns with regulatory and business requirements.
• 10) Prepare discovery and implementation documentation.

Required Skills & Experience

• 1) 10+ years of experience in IT Risk & Governance, Information Security Controls, or GRC.
• 2) Strong knowledge of SOX ITGC, NYDFS, or similar regulatory frameworks.
• 3) Good understanding of Vulnerability Management, Logical Access Controls (PAM/IAM), and Asset Management.
• 4) Experience working with control testing, risk assessment, and audit requirements.
• 5) Ability to understand regulatory requirements and convert them into practical control requirements.
• 6) Experience working with data teams on data mapping, data requirements, and control automation.
• 7) Working knowledge of Azure and enterprise data warehouse concepts.
• 8) Familiarity with ITSM, Identity Governance, Vulnerability Management, and PAM tools.
• 9)Strong client-facing and stakeholder management skills.
• 10) Good communication and documentation skills.
• 11) Consulting or vendor-side delivery experience is preferred.