Risk and Compliance Manager

Your role and responsibilities:

In this role, you will be responsible to lead and monitor the IS risk and compliance performance, implementation and management of IS IT related regulatory and digital compliance in the country. Accountable for strong over-all Governance Risk and Compliance (GRC) for country management. Establish, monitor and perform continuous compliance improvement in EL operational facilities.

You will be mainly accountable for:

• Establishing the local process in IS to interface with EL central compliance team to achieve objective of framework compliance.
• Collaborating with stakeholders to ensure the implementation, running and continuous improvement of the IS Risk and Compliance framework and policies in IS (Business, GBS, Corporate).
• Contributes to the implementation and monitoring of Export and Trade Control processes on a global level, based on ABB guidelines and industry best practices as these relate to IS.
• Understanding the requirements of Data privacy (GDPR) based on the ABB guidelines and work with business for implementation
• Leading project team and working group to deliver the project, processes, tools, solutions within agreed schedules, cost and at desired quality as related to IS risk and compliance.
• Developing productive relationships with leaders across the business, internal & external auditors and with external vendors to foster awareness to-wards IT, cyber and data security, compliance and the impact of a potential breach on the business.

• Bachelors or masters degree in Information Technology, Computer Science, Soft-ware Engineering, or a related qualification.
• 10+ years of experience in Information Security or IT general control compliance environment with at least 1-2 years in implementing ITGC controls, risk management framework, governance, IT risk assessment and management, IT Audit. - Manage the end-to-end execution (testing and documentation) of annual ICoFR program for IT controls as required by financial reporting regulations
• Develop and review workpapers that support testing conclusions and provide clear, concise, and well-documented evidence of control testing.
• Working knowledge of information policy formulation, information security management, business risk management, IT risk assessment and management, IT continuity management, IT governance formulation, and organizational change management, IT financial management and IT audit.
• Solid knowledge of GRC frameworks, assurance and security standards, IT governance, processes and program standards, GRC software and (new) control practices, IT infrastructure, DBMS and ERP systems and financial reporting processes