IT Governance, Risk & Compliance Manager

Datapro Inc•Hollywood, FL

About The Position

The IT Governance, Risk & Compliance Manager is a hands-on IT role responsible for assessing, developing, implementing, and monitoring technology governance, risk management, information security, and compliance processes for Global Outsources and Datapro Inc. The role translates information security standards and applicable banking and financial institution requirements into practical IT controls, documented procedures, and measurable remediation actions. The position supervises one direct report, with the primary emphasis on technical execution and process development. The role maintains governance and compliance documentation for both entities, develops and improves technical controls with IT operations, information security, and software development teams, and maintains an information security management system aligned with ISO/IEC 27001 and related standards. It addresses applicable banking and financial services requirements, supports assessments and audits, coordinates remediation and customer compliance responses, and reports risks and compliance progress to management. The position also provides employee guidance and training and oversees a direct report while remaining actively involved in technical assessments and implementation.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related discipline; a Business Administration or other related degree may be considered with substantial relevant technical IT experience.
At least five years of hands-on experience covering ISO/IEC 27001 compliance, IT governance, and banking or financial institution compliance and regulatory requirements, gained within financial institutions or technology service providers supporting them.
Demonstrated experience developing, documenting, implementing, and improving IT processes, procedures, and controls, and translating compliance requirements into operational technical practices.
Practical understanding of IT infrastructure, systems administration, access controls, change management, software development lifecycle processes, information security, vulnerability management, and incident response.
Experience conducting IT risk assessments, evaluating controls, preparing audit evidence, and tracking remediation of compliance and security findings.
Working knowledge of FFIEC IT guidance and applicable banking and financial services requirements relevant to technology service providers.
Ability to work directly with IT operations and software development teams to assess processes and implement effective controls.
Proficiency with Microsoft Office, particularly Excel, PowerPoint, and Outlook, and familiarity with Windows Server and Microsoft environments.
Strong analytical, critical-thinking, and problem-solving skills, with attention to detail and accuracy.
Clear written and verbal communication skills and ability to explain technical risks and requirements to technical and business audiences.
High ethical standards, sound judgment, and discretion when handling confidential information.
Strong organization and follow-through, with ability to prioritize competing requirements across two entities.
Ability to work independently and collaboratively, with a practical approach to process improvement.

Nice To Haves

Experience with OFAC sanctions compliance and related systems or technology controls.
Project management experience, particularly leading IT compliance, audit remediation, or process improvement projects; PMP certification is a plus.
Relevant certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CISM, CRISC, or CISSP.
Experience supervising or mentoring an employee and supporting compliance activities across multiple entities.

Responsibilities

Perform day-to-day IT governance, risk, and compliance work for both entities, maintaining policies, control documentation, risk registers, and audit evidence.
Develop, document, implement, and improve IT processes and controls in collaboration with IT operations, information security, and software development teams, covering access management, change management, secure software development, incident response, vulnerability management, backup and recovery, and business continuity.
Maintain and improve the information security management system and supporting controls aligned with ISO/IEC 27001 and related ISO 27000 family standards; support gap assessments, internal audits, certification readiness, and ongoing compliance activities.
Monitor applicable banking and financial services regulations and customer requirements, including relevant FFIEC IT guidance, and translate requirements into actionable IT procedures and controls.
Perform IT risk assessments and control reviews; conduct or coordinate vulnerability assessments and IT audits, document findings, and track corrective actions through verified remediation.
Maintain responsibility for the information security function, including assigned Corporate Information Security Officer duties, and work with technical teams to implement and monitor security controls.
Review and update IT policies, standards, procedures, and process workflows as systems, risks, regulatory guidance, and business needs change.
Coordinate responses to customer compliance questionnaires, due diligence requests, and internal or external audits; maintain supporting evidence and follow up on findings.
Partner with business, legal, and compliance stakeholders to support applicable OFAC sanctions compliance requirements and related technology controls where relevant.
Coordinate IT compliance and process improvement projects, define deliverables and timelines, track dependencies, and communicate progress and unresolved risks.
Provide practical training and guidance to employees on IT controls, information security, and compliance responsibilities.
Supervise and develop one direct report, assign priorities, and review work quality while remaining directly involved in technical assessments, documentation, and implementation.
Report compliance status, IT risks, control gaps, and remediation progress to management across both entities and recommend corrective actions.
Perform other related duties as assigned by management.