Digital Risk & Controls Specialist

Greater Kansas City Community Foundation • Kansas City, MO

2d • Hybrid

About The Position

The Digital Risk & Controls Specialist coordinates day-to-day activities that support the Community Foundation's governance and risk management program. This role focuses on digital controls, third-party risk management, and the systems and processes used to help identify, track, and manage risk. This role helps ensure the organization meets its cybersecurity, data protection, and compliance obligations by coordinating the collection, organization, reporting, and retention of required documentation and evidence. The position is a key partner to the cybersecurity team and supports the Community Foundation's broader digital risk management and information security programs.

Requirements

• Bachelor's degree in information security, information technology, business administration, accounting or related discipline, or equivalent practical experience.
• 2 years of experience in GRC, IT risk, security controls, audit readiness, control testing, compliance, security assurance, or related field.
• Experience with and knowledge of the principles and concepts around artificial intelligence and the use of general-purpose and specialized large language models as applied to overall business operations, including a basic understanding of AI and LLM risks.
• Hands-on experience with a variety of general-purpose AI tools.
• Possess written and verbal communication skills to facilitate being able to read, analyze, and interpret a variety of instructions and procedures, interpret and operate within current technical development and security best practices.
• Strong foundational knowledge of current cybersecurity and data protection best practices, with a basic understanding of contemporary governance standards, frameworks, and information technology risk management approaches.
• High general technical aptitude and ability to learn new software quickly and thoroughly.
• Ability to operate in a highly collaborative environment, while able to work independently and be self-motivated.
• Respond effectively to the most sensitive inquiries or complaints; work well under pressure, including identifying and quickly resolving problems.
• Ability to work regularly at a computer workstation in a fast-paced environment with frequent interruptions.
• Able to work in an office with moderate noise levels.
• Ability to communicate and interpret detailed information effectively.

Nice To Haves

• Preference towards beginning progress toward a professional designation such as CISA, CISM, CRISC, CIPP, AIGP, or equivalent.

Responsibilities

• Serves as the primary administrator and user for the GRC management platform and maintains all related GRC monitoring tools and workflows.
• Maintains centralized security, privacy, and AI risk management controls database, to continue the digital governance controls framework the Community Foundation has adopted.
• Tracks remediation of control gaps as identified in risk assessments and resolution of findings from external audits.
• Performs regular risk assessments across IT and data-handling processes, including vendors and other third parties.
• Maintains the Community Foundation’s digital governance risk register.
• Documents risk profiles for vendors, systems, and processes; oversees data related to risk management decisions and mitigations; delivers periodic risk reports and metrics to leadership, translating technical security risks into realistic business impact potential indicators.
• Coordinate reviews of vendors, applications, data-sharing arrangements, and AI tools to assess security, privacy, and technology risks.
• Analyze vendor documentation, identify control gaps and potential risks, and document findings and recommendations within the Community Foundation's risk management platform.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level