Forensic Data Analytics Manager
Role details
Job location
Tech stack
Job description
The primary purpose of this role is to direct and manage the Grant Thornton International Ltd.'s IT Compliance programme which:
- Responds to internal and external compliance assessments (e.g. GDPR, NIST CSF, ISQM1, SOC2, etc.),
- Supports GTIL's Cybersecurity team in maintaining and communicating policies and standards, and
- Supports IT operations in implementing processes and procedures to improve GTIL's security and compliance posture.
The ideal candidate will have experience
- Managing IT or security projects,
- Managing compliance programs and assessments, and
- In interacting with all levels of personnel (from executives to associates) within IT, cybersecurity, and business representatives.
The candidate must be able to
- Synthesize information to communicate clearly
- Develop and deliver plans and organise the team to achieve goals,
- Define, implement, and audit technology and security governance requirements (e.g. policies and standards),
- Develop and implement new processes / procedures in support of compliance requirements, and
- Leverage the compliance programme to identify ways to bring value to the GTIL organization and the GT network.
Main Responsibilities
The Associate director will manage and direct IT compliance programme, including:
- Define the ongoing strategy, objectives, and activities for the compliance programme including the necessary budget and resources to support this programme
- Manage the IT compliance team to achieve the strategy and objectives
- Coordinate with executives and stakeholders to clearly define compliance requirements and schedule
- Coordinate between assessors and GTIL to efficiently handle assessments, report results, findings, and remediation actions
- Facilitate the management of risk identification and review across the technology and security organizations
- Provide oversight for IT compliance team activities including:
- Responding to internally initiated assessments (e.g. NIST CSF, SOC2, ISQM1, etc.)
- Defining standards for responding to compliance questions from Grant Thornton's member firms and ensuring these questions are answered in a timely manner
- Implementing and continually improving compliance related processes, particularly for the collection of evidence to support assessments and compliance questions
- Leveraging the available tools to automate and support efficient compliance processes
- Driving the creation and update of technology and security policies and developing any necessary standards to support these policies
- Developing a method to audit compliance with the technology and security policies and standards
- Providing a framework for the organization to improve business continuity and disaster recovery capabilities, We are looking for a senior-level legal leader within the EU Data Legal team. The person will lead a team of lawyers and compliance professionals responsible for advising on EU, UK, and US data protection and privacy compliance, enabling Meta's products and services to...
UK Head of Compliance & MLRO
ctrl-alt.co
Ctrl Alt is designing and operating the on-chain infrastructure powering digital capital markets globally. We bring together a unique blend of expertise in financial markets and cutting-edge in-house technology to deliver tailored, compliant solutions in the alternative...
Director of Operations, UK - 14 month FTC
Lightricks
Director of Operations, UK - 14 month FTCDirector of Operations, UK - 14 month FTC 1 week ago Be among the first 25 applicants Get AI-powered advice on this job and more exclusive features. Lightricks, an AI-first company, is revolutionizing how visual content is..., Chief Risk Officer - Energy & Commodities The Chief Risk Officer (CRO), Energy & Commodities will serve as a strategic partner to the Division's leadership, embedding risk management into both long-term planning and day-to-day decision-making. This senior leader will...
Requirements
- Bachelor's degree or equivalent experience in IT and Cybersecurity (essential)
- Industry certifications such as ISACA-CISA, ISC2-CC, etc. (desirable)
Experience - essential
- Extensive experience of programme / project management
- Extensive experience working in cybersecurity and / or IT operations
- Programme leadership experience, e.g. able to own the compliance programme, define and implement strategy, and manage the team to achieve goals with limited oversight
- Management of compliance assessments
- General understanding of Infrastructure, Operations, Cybersecurity, and relevant regulatory requirements and assurance processes, including various auditing standards such as NIST CSF, ISO27001, and SOC2, GDPR
- Excellent communication and interpersonal skills, both verbal and written
- Ability to synthesize and present material in a concise understandable form to various target audiences - particularly to clarify the value of the compliance programme and its roadmap to executives
- Excellent organisational skills and the ability to prioritise and manage a varying workload for the compliance team
- A problem solver creative in finding solutions to issues or approaches to meet a need
- A team player willing to take on additional responsibilities as needed and able to adapt to changing priorities
- Experience in working with a global, virtual team
- Experience with directing business continuity / disaster recovery activities for the organization
- Experience with defining processes and using organizational change to implement the new processes
Experience - desirable
- Previous experience in working in a global professional services environment and in working with international stakeholders.
- Understanding of cyber security best practices including knowledge of the general cyber threat landscape and common security controls architecture.
- Experience in identifying, scoping, validating, and implementing a tools to support and improve business processes.
Benefits & conditions
At Grant Thornton International, you'll join a global team working in a virtual-first environment. What does this means for us? It means that work is no longer a place; it's what we do. And it means you'll have the flexibility to choose where you work within your country of employment, supported by the digital tools and equipment you need. The most important thing about the way we work though, is our CARE values - collaboration, agility, respect and excellence. As a result, our inclusive culture is one of our greatest strengths.
We provide learning and development opportunities aligned to your role and growth goals and you invest in yourself and career by making the most of them.
To support a good remote working environment, we provide a combination of one-off allowances and a monthly home office allowance. Alongside this, we offer a comprehensive range of core benefits including pension, health insurance, wellbeing programmes and more, although specific benefits may vary depending on the country of employment and local regulations.
