Risk Management & Compliance Manager

Responsibilities

Enterprise Risk Management Own organisation-wide Risk Register (RISK Matrix) with clear mitigation deadlines & owners. Implement proactive RAID Logs for Delivery & Support teams. Conduct periodic risk review meetings with functions (Delivery, P&C, CRM, Finance, Legal, Info. Sec). Compliance Monitoring & Control Govern adherence to ISO 27001 controls, privacy regulations, NDA terms, and client compliance requirements.

Align delivery governance to CMMI L5 practices (metrics, audits, improvements). Coordinate internal audits & readiness for external audits (ISO, client assessments, security reviews). Policy & Process Oversight Ensure organisation-wide compliance with: Data handling & Info. Sec policies Vendor onboarding & background checks Access controls & offboarding Delivery governance policies (PMO, Change Control, Defect Handling, Documentation Standards) Incident & Breach Management Own the Incident Reporting & RCA Framework with closure timelines and preventive actions.

Act as escalation SPOC for process violations, access breaches, commercial deviations, or regulatory risk. Reporting & Governance Dashboard Publish monthly Compliance & Risk Dashboard to EXCO with status: Red/Amber/Green. Track slippages and push corrective actions with leadership sign-off. Reporting & Governance Dashboard Publish monthly Compliance & Risk Dashboard to EXCO with status: Red/Amber/Green.

Track slippages and push corrective actions with leadership sign-off. Support Sales & Delivery with compliance inputs for RFPs, So. Ws, Contracts, Security Responses, QBRs. Participate in client audits and governance reviews as compliance representative Requirements Required Skills & Experience 12-15 + yrs in Risk, Compliance, Delivery Governance, PMO, or Security Compliance within IT services.

Hands-on understanding of ISO 27001, GDPR/DPA, CMMI, IT service governance, audit frameworks. Experience working closely with Cross-functional teams – Delivery, Architecture, QA, P&C, CRM, Finance, Legal. Ability to design policies, track control gaps, drive enforcement, and escalate when require d. Behavioural Attributes High integrity and courage to challenge gaps.

Detail-oriented with strong follow-through. Strong documentation discipline. Confident in communication with CXOs & clients. Bias for proactive governance rather than reactive policing. Success Metrics (KPIs) Reduction in repeat incidents/non-compliances Audit success rate (internal + external + client) % of governance SLAs met across functions On-time closure of risks & corrective actions CSAT confidence on compliance (client + internal)