Security Grc Transformation Senior Consultant

Ability to work effectively as a team member,
sharing responsibility, providing support,
maintaining communication, updating team
members on progress, and mentoring.
• Help prepare replies to RFP, create POC’s that
will be demonstrated to clients and other parties.
• Interface with the customer representatives as
and when needed.
• Demonstrate flexibility to travel to the customer
locations on a need basis.
• Develop and maintain productive working
relationships with client personnel.
• Participate in the design and implementation of
the governance, compliance and risk
management program and framework.
• Participate in the development and
implementation of internal policies, procedures,
and controls to manage risks and ensure
compliance with industry standards and
regulations.
• Participate in the design and implementation of
the audit management program.
• Participate in the design and implementation of
platform for Governance, Risk & Compliance
(GRC) System and/or Audit Management System
(AMS).
• Perform data quality reviews for GRC and Audit
process measurement.
• Advise on risk management metrics and
reporting.
• Mentor the project team in executing projects.
• Planning and monitoring of the project
deliverables from the team.
• Prepare project documentation and procedures.
Understand, analyze the requirements, allocate
tasks, and update status reports.
• Ensuring timely delivery of allocated tasks and
adherence to quality processes specified for the
project.
Qualification

Bachelor’s degree in computer science,

information technology, or a related field.

• Has more than 3 years (5 years for Junior Lead

Consultant) of experience in GRC or in Audit

Management

• Has working experience in the design &

implementation or administration of GRC Platform

and AMS such as Archer (preferred), Diligent,

TeamMate, and ServiceNow.



Specific 1 year ‘experience in consulting/advisory

engagements (Preferred)

• Specific 1 year’ experience in pre-sales of GRC

Platform and AMS products/solutions (Preferred)

• Preferably has completed at least two (2) end to

end implementation of GRC Platform or AMS

• Experience in integrating GRC Platform or AMS

with 3rd Party applications using Data Feeds,

API’s, Data Publications.

• Experience of designing on-demand solutions in

GRC Platform and AMS to meet specific client

requirements.

• Should have knowledge about GRC Platform or

AMS use cases.

• Strong knowledge of GRC & Audit Management

concepts, and information security standards like

CIS, NIST, and ISO 27001/2

• Understanding of local regulations (BSP circulars,

Data Privacy)

• Demonstrated experience in process definition &

improvement, business requirements gathering,

workflow design and process mapping.

• Good understanding of technology platforms and

risk management practices.

• Must have the initiative and the ability to manage

multiple tasks, work under pressure and meet

deadlines as required.

• Proven history of providing exemplary customer

service to both internal and external stakeholders

• Has at least one (1) of the following certifications:

o ISC2 Certified in GRC (CGRC)

o ISACA Certified in Risk and Information Systems

Control (CRISC)

o ISACA Certified Information Systems Auditor

(CISA)

o Project Management Institute – Risk Management

Professional (PMI-RMP)

o Other industry recognized certifications in GRC

o Other certifications related to GRC Platform and

AMS - Archer (preferred), Diligent, TeamMate, and

ServiceNow
About The Global Accounting Firm