Governance Compliance Specialist / Consultant

About the role

This role supports the Security Governance function by providing regulatory compliance, audit and assurance support across technology and information security areas. It facilitates regulatory engagements, inspections and audits, coordinates assurance and internal control activities, and supports issue management and remediation tracking. It works closely with Technology, Technology Risk Management, Compliance, Group Internal Audit and Group stakeholders.

Key responsibilities

• Support regulatory compliance, including gap assessments and due diligence against regulatory requirements, standards and internal policies
• Facilitate regulatory engagements, including coordination of responses, walkthroughs and information requests
• Provide regulatory inspection support, including preparation, artefact collation, response coordination and follow-up tracking
• Review regulatory remediation actions for alignment with regulatory expectations and give regulatory awareness and advisory support to Line 1 stakeholders
• Facilitate audit and internal control self-assessments, including response and evidence coordination
• Track audit findings and remediation actions, monitor status and report
• Support pre-audit preparation, audit walkthroughs and thematic reviews to identify control gaps, trends and improvement opportunities
• Coordinate self-identified issues and inbound business partner due diligence activities
• Support security governance initiatives and process improvement, including dashboards, tooling and workflow automation for tracking and reporting
• Maintain governance artefacts, registers, metrics and management-ready reporting
• Act as a coordination point between Technology, Technology Risk Management, Compliance, Group Internal Audit and Group teams, and support consistent communication during audits, inspections and assessments

Required profile

• Bachelor's degree in computer science, information security, information systems or a related discipline
• 5 to 8 years of experience supporting IT audits, regulatory inspections, risk and compliance assessments or assurance activities
• Experience managing audit issues, remediation tracking and regulatory or governance initiatives
• Exposure to financial services, large technology organisations or audit/advisory firms is advantageous
• Strong written communication, coordination and stakeholder management skills, sound judgement, professional integrity and a structured approach to problem solving

Required skills

• Professional certifications (e.g. CISSP, CISA, CRISC, CCSP) preferred
• Working knowledge of information security frameworks (e.g. ISO/IEC 27001)
• Familiarity with GRC tools, dashboards or workflow automation is an advantage