Job Description
About the Role
Our client, a well-established global company in the manufacturing and infrastructure technology industry, is looking for a Senior Risk & Compliance Automation Engineer to strengthen its IT risk management, cybersecurity and Governance, Risk & Compliance (GRC) capabilities. This role combines IT risk management, security governance, data analytics and automation, with a focus on improving compliance processes, monitoring control effectiveness and managing emerging technology risks, including AI security.
Key Responsibilities
-
Lead IT, cybersecurity and OT risk assessments, including risk identification, evaluation and mitigation planning.
-
Design and automate GRC processes covering evidence collection, control validation, compliance monitoring and risk reporting.
-
Develop data pipelines, dashboards and KRI/KPI scorecards to monitor risk trends, control effectiveness and compliance maturity.
-
Work closely with IT teams and control owners to establish security controls, policies, procedures and governance standards.
-
Support IT control implementation, ongoing monitoring, remediation activities and audit readiness.
-
Conduct security risk assessments for AI technologies and incorporate AI security controls into enterprise governance processes.
-
Support third-party risk management, vendor assessments and compliance-related incident response.
Key Requirements
-
Minimum 5 years of experience in Information Security, IT Risk Management or GRC, with at least 2 years of hands-on experience in security engineering, automation development, AI security or data security.
-
Good understanding of cybersecurity and GRC frameworks such as ISO 27001, NIST CSF 2.0, SOC 2 and CIS Controls. Knowledge of NIST AI RMF or ISO 42001 is an advantage.
-
Experience in cybersecurity risk assessments, business impact analysis, IT controls and compliance reporting.
-
Hands-on experience with Power BI, SQL and/or Python for data preparation, automation and analytics.
-
Experience with GRC platforms such as Vanta, AuditBoard, 6clicks or Anecdotes. Familiarity with ServiceNow IRM/GRC, Jira and cloud platforms (Azure/GCP) is an advantage.
-
Strong analytical, problem-solving and communication skills, with the ability to work independently and engage stakeholders across different levels.
-
Willingness to accommodate US time zone meetings and work on a flexible hybrid arrangement with regular office attendance.