GRC Consultant

Position Title: Governance, Risk, and Compliance (GRC) Consultant

Contract Duration: 1 Year (with potential for renewal)

Employer: Infinite Computer Solutions

Key Responsibilities:

• Perform comprehensive risk assessments and compliance evaluations to identify potential vulnerabilities.
• Assist in developing and maintaining governance frameworks, policies, and control mechanisms.
• Keep abreast of evolving regulatory standards and ensure organizational adherence to all relevant requirements.
• Oversee Third-Party Risk Management (TPRM) initiatives to mitigate external vendor risks.
• Monitor and document Key Risk Indicators (KRIs), risk levels, and the effectiveness of controls, providing regular reports.
• Support audit processes, facilitate remediation efforts, and engage with stakeholders across various departments.
• Collaborate effectively with business units, IT teams, security personnel, and compliance teams to promote a unified risk management approach.

Required Expertise and Skills:

• Proficiency in Governance, Risk & Compliance (GRC) principles and practices
• Experience in conducting Risk Assessments and managing Risk Management processes
• Strong understanding of Regulatory Compliance frameworks and standards
• Knowledge of Operational and Technology Risk management
• Experience with Third-Party Risk Management (TPRM) and Vendor Risk Management
• Familiarity with Internal Controls and supporting audit functions
• Excellent stakeholder management and communication abilities

Preferred Qualifications:

• Background in Banking or Financial Services sectors
• Knowledge of industry standards such as ISO 27001, NIST, COBIT, MAS TRM, or GDPR
• Professional certifications including CRISC, CISA, CGEIT, PMP, or AIGP