IT Risk and Compliance Specialist

Responsibilities

• Direct cross-functional risk and compliance efforts across IT and business teams to advance enterprise governance objectives.
• Act as the central point of contact for auditors, internal stakeholders, compliance partners, and technology leaders during assessments and review cycles.
• Prepare the organization for ISO 27001 certification activities and support ongoing alignment with established compliance obligations.
• Evaluate control environments through risk assessments and recommend improvements that strengthen security oversight and operational resilience.
• Manage third-party risk reviews by assessing vendor security practices and identifying areas that require mitigation or follow-up.
• Oversee segregation of duties governance and monitor the effectiveness of related controls across relevant systems and processes.
• Work with stakeholders to identify audit findings, define corrective action plans, and monitor remediation progress through resolution.
• Develop and maintain policies, standards, procedures, and supporting documentation that reinforce security and compliance expectations.
• Cook up disaster recovery and business continuity planning efforts, including testing activities and program enhancement initiatives.
• Contribute to data protection, security awareness, and emerging governance initiatives related to areas such as AI risk and control management.

Requirements

• At least 5 years of experience leading or supporting IT governance, risk, and compliance programs in complex enterprise environments.
• Strong knowledge of security and compliance frameworks such as ISO 27001, NIST, SOX, IT general controls, or comparable standards.
• Demonstrated success managing audits, validating controls, coordinating stakeholders, and driving remediation activities.
• Experience performing risk assessments and converting regulatory or framework requirements into workable business and technical controls.
• Ability to create clear security policies, standards, procedures, and governance documentation.
• Strong communication and organizational skills with the ability to influence both technical and non-technical audiences.
• Familiarity with business continuity, disaster recovery, and vendor risk management practices.

Qualifications

• Preferred qualifications include certifications such as CISSP or ISO 27001 Lead Auditor, along with exposure to cloud environments across SaaS, PaaS, and IaaS.

Skills

• Strong leadership and project management skills.
• Excellent communication and interpersonal skills.
• Knowledge of regulatory compliance standards and frameworks.
• Experience with risk assessment and control implementation.
• Ability to work effectively with diverse stakeholders.
• Proficiency in IT governance tools and methodologies.

Benefits

Robert Half offers competitive compensation and benefits, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan.