IT Risk & Governance Consultant

Key Responsibilities

• Act as the onshore point of contact for client Risk and Governance stakeholders.
• Lead discovery sessions and walkthroughs with client SMEs.
• Identify source systems and understand the controls and data available in each system.
• Define control-to-data requirements and source-to-target mappings.
• Identify data gaps, access issues, and dependencies during discovery.
• Work with client stakeholders to define control thresholds and evaluation criteria.
• Help prioritize control domains and define the implementation sequence.
• Work with the technical team to translate control requirements into testable control logic.
• Review the solution design to ensure it aligns with regulatory and business requirements.
• Prepare discovery and implementation documentation.

Required Skills & Experience

• 10+ years of experience in IT Risk & Governance, Information Security Controls, or GRC.
• Strong knowledge of SOX ITGC, NYDFS, or similar regulatory frameworks.
• Good understanding of Vulnerability Management, Logical Access Controls (PAM/IAM), and Asset Management.
• Experience working with control testing, risk assessment, and audit requirements.
• Ability to understand regulatory requirements and convert them into practical control requirements.
• Experience working with data teams on data mapping, data requirements, and control automation.
• Working knowledge of Azure and enterprise data warehouse concepts.
• Familiarity with ITSM, Identity Governance, Vulnerability Management, and PAM tools.
• Strong client-facing and stakeholder management skills.
• Good communication and documentation skills.
• Consulting or vendor-side delivery experience is preferred.