Manager, Risk and Compliance

Responsibilities: Execute certification activities for Assurance Digital products and platforms under established standards Prepare certification artifacts including procedures, evidence, conclusions, and release recommendations Support pre-release readiness and post-release follow-up activities Assist with risk assessments for new products, enhancements, and material changes; document risks and mitigations Track risk treatment actions through completion and escalate issues as needed Produce and maintain documentation and evidence per templates and standards; perform quality checks Maintain certification records, findings logs, and evidence repositories Collaborate with product, engineering, and delivery teams to gather inputs and clarify requirements Serve as day-to-day Risk & Compliance contact for initiatives and escalate complex issues Support governance forums with materials, status reporting, and action tracking Assist with audits, inspections, peer reviews, and internal oversight requests Other duties as assigned

Key requirements: 5+ years of experience in risk, compliance, or IT governance roles Degree in accounting, information systems, business, computer science, or related field Knowledge of external audit workflows and audit quality, documentation, and evidence Experience with IT control frameworks (COSO, COBIT, ITIL) and technology risk concepts Exposure to privacy/data protection impact assessments, SOC 1/SOC 2 reporting concepts Familiarity with cloud environments (Azure/AWS/GCP) and related controls Experience partnering with product/technology teams to gather evidence and drive remediation Professional certifications preferred: CPA, CISA, CRISC, AIGP, AAIR, AAISM or similar Strong collaboration and stakeholder management Clear written and verbal communication Proactive problem-solving and issue escalation Privacy/data protection controls SOC 1/SOC 2 reporting concepts Cloud platforms and controls (Azure/AWS/GCP)