Manager - Technology, Risk & Compliance
Hybrid
Korn Ferry
Korn Ferry is a global organizational consulting firm. We work with our clients to design optimal organization structures, roles, and responsibilities. We help them hire the right people and advise them on how to reward and motivate their...19727
Country United Kingdom Location type Hybrid State / Province Greater London City London About UsKorn Ferry is a global organizational consulting firm. We help clients synchronize strategy and talent to drive superior performance. We work with organizations to design their structures, roles, and responsibilities. We help them hire the right people to bring their strategy to life. And we advise them on how to reward, develop, and motivate their people.
Our 10,000 colleagues serve clients in more than 50 countries. We offer five core solutions:
- Organizational Strategy
- Assessment and Succession
- Talent Acquisition
- Leadership Development
- Total Rewards
Primary Function:
The Manager, Technology Risk & Compliance will be an integral member of the technology team. This role provides focused consulting services to ensure compliance and protection of the operational and technical areas of Korn Ferry’s products and services.
The successful candidate will learn Korn Ferry’s environment and apply their knowledge of risk in completing Requests For Proposals (RFP), contract reviews (technology related portions) and other related business development activities. The Manager, Technology Risk and Compliance will plan, execute, and manage projects related to risk management, risk mitigation, compliance to policies, control assurance and overall company awareness. They will work directly with clients, consultants, third parties to facilitate risk management processes and to identify and define acceptable levels of residual risk and/or risk acceptance tolerance. Through their work they will educate internal them about technical controls and operations.
To be successful in the role, the Manager, Technology Risk & Compliance will require strong analytical, communication and consulting skills with advance knowledge of information security, audit, risk management, privacy, and other organizational compliance functions. Most importantly, the ideal candidate must have a solid background in information security controls and best practices. They must also excel at communication and be measured in their approach.
Essential Duties and Responsibilities:
- Respond to and consult with business partners to fulfill RFP/RFI requests, annual compliance requirements, and contract reviews.
- Work with business partners and clients from the initial RFP phase through to business delivery and until the termination of the client relationship.
- Manage audits, questionnaires and exams in partnership with internal and external audit client audits.
- Develop and implement audits and risk evaluations internal technical functions.
- Partner with enterprise-wide Compliance initiatives including, ISO 27001 and ISO 27018 certification, GDPR compliance requirements and other regulatory initiatives.
- Maintain the organizational risk register associated with ISO
- Work with internal departments to facilitate risk management processes and to identify acceptable risk tolerances.
- Develop remediation strategies to mitigate risk.
Supervision: Receives direction from the Vice President Planning & Governance with regard to objectives and prioritization of projects.
Attributes:
Self-motivated team player with strong work ethic and the ability to “get things done”
· Resourceful, good listener with good problem solving skills.
· Proactive, rather than reactive.
· Strong oral and written communication skills and a desire to communicate effectively with colleagues, management, and clients.
- Strong aptitude to analyze and determine data relationships, attributes, and data workflows
- Ability to handle multiple projects and deadlines
Qualifications:
Education: Highly desirable four-year bachelor’s degree, or related experience, preferably in Business, Risk Management or Computer Science
Experience: 10+ years of production operations in a consulting, audit or financial
services environment
- Ability to conduct technology Audits, Internal & External
- Analytical skills with an eye for detail
- Planning and organizational skills with the ability to work across multiple, complex projects
- Ability to understand broader business issues, must have a high degree of business acumen
- Excellent written and verbal communications to both front-line and executive management
Skills: Knowledge or base understanding of these areas is highly
desirable:
- Certifications like SOC (SSAE 16), SOX (Sarbanes-Oxley compliance), ISO 27001 and 27018
- Familiarity with NIST, DoD, ISO 27001 family, COBIT
- RFP/RFI management
- Operational and Strategic Planning
- Operating effectiveness and quality management systems
- Cost Reduction Strategies
- Budgeting/Capital Appropriation
- Internal consulting to top management
- Project management
- Customer Service
- Privacy, inclusive of GDPR
- Contract Negotiation
Internal Mobility at Korn Ferry
If you currently work for Korn Ferry or one of our affiliates, you must be eligible to apply for a different position within Korn Ferry to use the Careers Site. If you accept such a position, your benefits programs and Human Resources policies may change. Please consult with your HR contact for the new position concerning application eligibility, including any immigration/visa needs, benefit programs, and HR policies applicable to that position.
Korn Ferry is an Equal Employment Opportunity/Affirmative
Action Employer - Minority/Female/Disability/ Veteran
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or veteran status or any other characteristic protected by federal, state, or local law.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits COBIT Compliance Computer Science DoD GDPR Governance ISO 27001 NIST Privacy RFPs Risk management SOC SOX Strategy
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.