IT Compliance & Risk Manager

We are seeking a highly skilled and experienced IT Compliance and Cyber Risk Manager to join our dynamic IT team. This role is crucial in ensuring our IT operations comply with IT general controls, SOX controls, and other regulatory requirements. Additionally, the manager will lead our Cyber Risk Quantification Program, identifying and mitigating cyber risks to protect our company’s assets and reputation.

Responsibilities:

• Compliance Management:
  • Ensure all IT operations comply with IT general controls, SOX controls, and other relevant frameworks the company chose to comply with (e.g. NIST CSF, CERT RMM) regulatory requirements.
  • Develop, implement, and maintain IT compliance methodology, policies and procedures.
  • Work with your IT colleagues to ensure compliance with internal and external standards. Lead regular assessments with the IT organization.
  • Collaborate with internal and external auditors to facilitate compliance audits and address findings.
• IT-Risk Management:
  • Manage the internal Cyber Risk Quantification Program with the company tools to identify, assess, and quantify cyber risks.
  • Monitor and report on the effectiveness of IT risk management initiatives.
  • Stay updated on the latest IT Risks, cyber threats, and vulnerabilities.
• Policy and Procedure Development:
  • Develop and maintain IT compliance and cyber risk management policies and procedures.
  • Ensure policies and procedures are communicated effectively to all relevant stakeholders.
  • Provide training and guidance to IT staff on compliance and risk management best practices.
• Collaboration and Communication:
  • Work closely with other departments to ensure a cohesive approach to IT compliance and cyber risk management.
  • Communicate effectively with senior management, providing regular updates on compliance status and IT-Risk management activities.
  • Serve as the primary point of contact for IT compliance and risk management issues.

Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• Minimum of 5 years of experience in IT compliance, ITGC and/or SOX controls, and IT risk management.
• Strong knowledge of IT general controls, frameworks, and regulatory requirements.
• Experience with IT risk quantification and mitigation strategies.
• Excellent analytical, problem-solving, and communication skills.
• Relevant certifications such as CISA, CISSP, CRISC, or similar are highly desirable.
• Strong communication and interpersonal skills, with the ability to effectively engage with stakeholders at all levels.
• Ability to manage multiple tasks and deadlines in a fast-paced environment.
• Eager Learner: Has a strong willingness to learn new things and continuously seeks to improve their skills and knowledge.
• Team Player: Works well in a team and contributes to a positive team environment.
• Problem Solver: Demonstrates strong problem-solving skills, with the ability to think critically and find creative solutions to challenges.
• Detail-Oriented: Pays close attention to detail and has a strong commitment to quality.
• Adaptable: Is flexible, can quickly adapt to new situations and changes in project scope or direction, understand the needs of his peers and contribute to a professional and enjoyable work environment.

Other Information:

At BW, we offer challenging work in an international environment with a team of dedicated and competent colleagues. We recognize that the success of BW rests with each employee's ability to provide the necessary skills and confidence within the team, and our training is tailored to suit individual needs and career aspirations.

Vision: Best on Water

Mission: We deliver energy for the world today, and find solutions for tomorrow.

Values:

• Collaborative
• Ambitious
• Reliable
• Enduring

If our values resonate with you and you think you can contribute, we would be delighted to hear from you!

Don't meet every single requirement? At BW, we value diversity and the unique experiences that people from different backgrounds bring to our business. We welcome you to apply for the role even if you don't fully meet all the listed requirements, especially if you are passionate about building an inclusive culture where we strive to be our best. You may be just the right candidate!

Information for Recruitment Agencies:

BW endeavors to recruit and fill vacancies directly. However, when we do need to engage with agencies, BW operates a preferred supplier list (PSL) and will not be accepting unsolicited applications from non-PSL agencies for this role.