GRC Senior SME

Required Technical Skill Set

Deep expertise in enterprise risk management platforms (risk register, workflow automation, reporting)
Strong understanding of CIS Critical Security Controls, PCI, GDPR, ISO 27001, and regulatory frameworks
Experience with Threat Exposure Management (penetration testing, vulnerability management)
Business continuity planning (BCP), policy and governance framework creation, RTO/RPO validation
Security architecture review and strategic guidance
Advanced stakeholder engagement, governance facilitation, and executive reporting
Automation of risk workflows, dashboards, and reporting
Familiarity with third-party risk management, audit support, and regulatory mapping
Desired Competencies (Technical/Behavioral Competency)

Must-Have

Proven leadership in risk governance and oversight for large, complex organizations
Ability to drive risk register management, policy enforcement, and application control
Experience in facilitating governance forums, operational meetings, and risk reviews
Strong communication skills for executive dashboards, audit support, and cross-functional engagement
Ability to mentor analysts and lead cross-functional risk forums
Strategic thinking and continuous improvement mindset
Good-to-Have

Experience with retail sector GRC
Experience supporting PCI annual compliance programs
Knowledge of automation tools for risk and compliance reporting
Location
Auckland
Job Function
TECHNOLOGY
Role
Consultant
Job Id
396948
Desired Skills
Risk & Compliance