Job Description

About the Role

Our client, a well-established global company in the manufacturing and infrastructure technology industry, is looking for a Senior Risk & Compliance Automation Engineer to strengthen its IT risk management, cybersecurity and Governance, Risk & Compliance (GRC) capabilities. This role combines IT risk management, security governance, data analytics and automation, with a focus on improving compliance processes, monitoring control effectiveness and managing emerging technology risks, including AI security.

Key Responsibilities

• Lead IT, cybersecurity and OT risk assessments, including risk identification, evaluation and mitigation planning.

• Design and automate GRC processes covering evidence collection, control validation, compliance monitoring and risk reporting.

• Develop data pipelines, dashboards and KRI/KPI scorecards to monitor risk trends, control effectiveness and compliance maturity.

• Work closely with IT teams and control owners to establish security controls, policies, procedures and governance standards.

• Support IT control implementation, ongoing monitoring, remediation activities and audit readiness.

• Conduct security risk assessments for AI technologies and incorporate AI security controls into enterprise governance processes.

• Support third-party risk management, vendor assessments and compliance-related incident response.

Key Requirements

• Minimum 5 years of experience in Information Security, IT Risk Management or GRC, with at least 2 years of hands-on experience in security engineering, automation development, AI security or data security.

• Good understanding of cybersecurity and GRC frameworks such as ISO 27001, NIST CSF 2.0, SOC 2 and CIS Controls. Knowledge of NIST AI RMF or ISO 42001 is an advantage.

• Experience in cybersecurity risk assessments, business impact analysis, IT controls and compliance reporting.

• Hands-on experience with Power BI, SQL and/or Python for data preparation, automation and analytics.

• Experience with GRC platforms such as Vanta, AuditBoard, 6clicks or Anecdotes. Familiarity with ServiceNow IRM/GRC, Jira and cloud platforms (Azure/GCP) is an advantage.

• Strong analytical, problem-solving and communication skills, with the ability to work independently and engage stakeholders across different levels.

• Willingness to accommodate US time zone meetings and work on a flexible hybrid arrangement with regular office attendance.