Manager - Technology, Risk & Compliance

Korn Ferry is a global organizational consulting firm. We help clients synchronize strategy and talent to drive superior performance. We work with organizations to design their structures, roles, and responsibilities. We help them hire the right people to bring their strategy to life. And we advise them on how to reward, develop, and motivate their people.

Our 10,000 colleagues serve clients in more than 50 countries. We offer five core solutions:

• Organizational Strategy
• Assessment and Succession
• Talent Acquisition
• Leadership Development
• Total Rewards

Primary Function:

The Manager, Technology Risk & Compliance will be an integral member of the technology team. This role provides focused consulting services to ensure compliance and protection of the operational and technical areas of Korn Ferry’s products and services.

The successful candidate will learn Korn Ferry’s environment and apply their knowledge of risk in completing Requests For Proposals (RFP), contract reviews (technology related portions) and other related business development activities. The Manager, Technology Risk and Compliance will plan, execute, and manage projects related to risk management, risk mitigation, compliance to policies, control assurance and overall company awareness. They will work directly with clients, consultants, and third parties to facilitate risk management processes and to identify and define acceptable levels of residual risk and/or risk acceptance tolerance. Through their work, they will educate internal teams about technical controls and operations.

Essential Duties and Responsibilities:

• Respond to and consult with business partners to fulfill RFP/RFI requests, annual compliance requirements, and contract reviews.
• Work with business partners and clients from the initial RFP phase through to business delivery and until the termination of the client relationship.
• Manage audits, questionnaires, and exams in partnership with internal and external audit client audits.
• Develop and implement audits and risk evaluations for internal technical functions.
• Partner with enterprise-wide Compliance initiatives including ISO 27001 and ISO 27018 certification, GDPR compliance requirements, and other regulatory initiatives.
• Maintain the organizational risk register associated with ISO.
• Work with internal departments to facilitate risk management processes and to identify acceptable risk tolerances.
• Develop remediation strategies to mitigate risk.

Supervision: Receives direction from the Vice President Planning & Governance with regard to objectives and prioritization of projects.

Attributes:

• Self-motivated team player with strong work ethic and the ability to “get things done.”
• Resourceful, good listener with good problem-solving skills.
• Proactive, rather than reactive.
• Strong oral and written communication skills and a desire to communicate effectively with colleagues, management, and clients.
• Strong aptitude to analyze and determine data relationships, attributes, and data workflows.
• Ability to handle multiple projects and deadlines.

Qualifications:

Education: Highly desirable four-year bachelor’s degree, or related experience, preferably in Business, Risk Management, or Computer Science.

Experience: 10+ years of production operations in a consulting, audit, or financial environment.

• Ability to conduct technology audits, internal & external.
• Analytical skills with an eye for detail.
• Planning and organizational skills with the ability to work across multiple, complex projects.
• Ability to understand broader business issues; must have a high degree of business acumen.
• Excellent written and verbal communication skills to both front-line and executive management.

Skills: Knowledge or base understanding of these areas is highly desirable:

• Certifications like SOC (SSAE 16), SOX (Sarbanes-Oxley compliance), ISO 27001, and 27018.
• Familiarity with NIST, DoD, ISO 27001 family, COBIT.
• RFP/RFI management.
• Operational and strategic planning.
• Operating effectiveness and quality management systems.
• Cost reduction strategies.
• Budgeting/capital appropriation.
• Internal consulting to top management.
• Project management.
• Customer service.
• Privacy, inclusive of GDPR.
• Contract negotiation.

Internal Mobility at Korn Ferry:

If you currently work for Korn Ferry or one of our affiliates, you must be eligible to apply for a different position within Korn Ferry to use the Careers Site. If you accept such a position, your benefits programs and Human Resources policies may change. Please consult with your HR contact for the new position concerning application eligibility, including any immigration/visa needs, benefit programs, and HR policies applicable to that position.

Korn Ferry is an Equal Employment Opportunity/Affirmative Action Employer - Minority/Female/Disability/Veteran.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or veteran status or any other characteristic protected by federal, state, or local law.