Source Job

$4,000–$4,500/mo
Poland

  • Develop, update, and maintain IT Governance documentation in compliance with regulations and standards.
  • Participate in IT risk analysis, identifying risks and preparing mitigation plans related to information security and business continuity.
  • Support compliance processes, including interpreting legal requirements such as DORA and coordinating with regulators across regions.

IT Governance Risk Management Documentation

20 jobs similar to ICT Governance Specialist

Jobs ranked by similarity.

Indonesia

  • Lead cybersecurity, operational resilience, and regulatory compliance initiatives across Indonesia.
  • Ensure adherence to OJK, Bappebti, PDP Law, and Bank Indonesia regulations while aligning with Binance's global security framework.
  • Act as primary advisor to executive leadership and engage directly with Indonesian regulators on security and data protection matters.

Binance is a leading global blockchain ecosystem behind the world's largest cryptocurrency exchange. We are trusted by over 300 million people in 100+ countries and offer a wide range of digital-asset products and services.

$86,000–$120,000/yr
US Unlimited PTO 12w maternity 12w paternity

  • Own end-to-end CIP decisioning and maintain quality across high-volume programs.
  • Perform quality assurance on AI-assisted onboarding decisions and document reasoning for regulatory scrutiny.
  • Support bank partner deliverables and contribute to AML/BSA compliance testing.

Lithic is a modern card issuing and processing platform that powers card programs for over 100 innovative fintech clients, including Mercury, Flex, and Novo. The company is backed by world-class investors and has a team of 170+ employees across 26 states and 7 countries, headquartered in NYC.

$150,000–$170,000/yr
US Unlimited PTO

  • Lead the governance, risk, and compliance function across security policies, standards, risk management, audits, and third-party risk.
  • Own audit readiness and ongoing compliance programs across frameworks such as SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST CSF, and more.
  • Manage third-party and supply chain risk management, including vendor security reviews, due diligence, and remediation tracking.

Accela provides government software solutions to improve efficiency, increase citizen engagement, and enable thriving communities. They have been an industry leader for nearly 20 years and are committed to diversity, equity, and inclusion.

India

  • Manage internal audits and support external compliance assessments across business functions.
  • Perform gap analyses and track remediation actions for compliance frameworks.
  • Maintain and improve compliance documentation, policies, and risk registers.

Our partner is a growing SaaS organization serving global industries. It fosters a collaborative and inclusive culture with a focus on employee development and well-being.

US

  • Develop and maintain the enterprise IT GRC strategy, framework, and roadmap, presenting updates to executive leadership.
  • Lead enterprise IT risk assessments, maintain risk registers, and oversee remediation efforts.
  • Ensure compliance with regulations like NIST, ISO 27001, SOC, PCI-DSS, HIPAA, GDPR, and SOX.

Mission Critical Group is an end-to-end power solutions and services provider that accelerates time-to-power for mission critical environments. With over 1.5 million square feet of U.S. manufacturing capacity, the company supports data centers, healthcare, and industrial facilities where uptime is non-negotiable.

Hong Kong

  • Execute end-to-end audit engagements across multiple jurisdictions, evaluating controls and testing ITGCs and business processes.
  • Conduct regulatory compliance testing for EU, UK, Hong Kong, and Dubai regulations.
  • Collaborate with stakeholders, draft audit findings, and drive continuous improvement through data analytics.

EXANTE is a pioneering wealth tech company delivering centralized trading solutions and B2B financial infrastructure. With over 700 employees from 70+ nationalities across 70 locations, the company prioritizes investing in its people.

US

  • Lead GRC initiatives to protect the business and strengthen technology risk posture.
  • Translate complex risk data into clear insights and action plans for leadership.
  • Build and improve policies, standards, and procedures for governance and compliance.

Herbalife is a global nutrition company focused on developing and distributing dietary supplements and personal care products. The company employs thousands worldwide and fosters a collaborative, fast-paced environment with a culture of accountability and continuous improvement.

$84,000–$94,000/yr
US 2w PTO

  • Coordinate IT compliance and audit activities across Information Security, IT, and business stakeholders.
  • Support SOX IT General Controls (ITGC) activities, including planning, evidence collection, and auditor inquiries.
  • Track audit findings, remediation plans, and risk items to ensure timely completion and closure.

Watts provides safe, clean water solutions for residential and commercial settings worldwide, with a focus on innovation and sustainability. The company is a $1.9 billion global firm with about 5,000 employees and a team-oriented, supportive culture that emphasizes growth and diversity.

$198,238–$233,221/yr
US

  • Own and manage the compliance program including SOC 2 and ISO 27001 readiness and audits.
  • Lead risk assessments, control testing, and enterprise risk management processes.
  • Partner with Engineering, Security, Product, Legal, HR, and Operations to embed compliance into business processes.

Calendly is a scheduling platform used by millions to automate meetings and streamline time management. They are a rapidly growing SaaS company fostering a culture of learning and high performance.

$129,500–$185,000/yr
US Unlimited PTO

  • Serve as a subject matter expert on consumer financial protection laws and regulations, issue management, and complaint management.
  • Supervise, coach, and develop junior compliance team members while driving development and execution of remediation plans.
  • Provide risk-based compliance guidance to product, operations, and business teams on applicable laws and regulations.

Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering crypto products and services in over 70 countries. As a publicly traded company, Gemini is committed to unlocking the next era of financial, creative, and personal freedom.

Canada Unlimited PTO

  • Manage compliance monitoring, testing, and reporting for Canadian securities regulations and investment fund requirements.
  • Provide regulatory guidance across investment management, digital assets, and trading activities.
  • Support AML, ATF, and financial crime compliance programs while coordinating with regulators and internal teams.

The partner company is a financial services firm operating in investment management, digital assets, and regulatory frameworks. It fosters a remote-first, low-ego culture emphasizing teamwork and execution.

US Unlimited PTO

  • Manage and implement complex controls frameworks for large systems consisting of Cloud infrastructure and SaaS services.
  • Design and develop automation solutions for evidence collection across Cloud infrastructure, endpoints, and SaaS services.
  • Conduct risk assessments across business units and processes, identifying risk findings and recommending remediation strategies.

Virtru is a data protection platform that enables secure sharing without sacrificing security or privacy. Backed by top venture capital firms, the company helps Fortune 500 companies and government agencies achieve true data security with freedom to share.

$152,400–$213,360/yr
UK

  • Serve as the designated Money Laundering Reporting Officer (SMF17) for the UK entity, overseeing the financial crimes compliance program.
  • Lead the development of the Financial Crime Compliance Monitoring Programme and business-wide compliance risk assessment.
  • Partner with UK Compliance and global Financial Crimes leaders to maintain a clear and effective control environment across onboarding, transaction monitoring, and investigations.

Affirm is reinventing credit to make it more honest and friendly, offering buy now pay later without hidden fees or compounding interest. It is a remote-first company with competitive benefits including full health coverage and stipends.

$87,750–$133,250/yr
Australia

  • Lead the Australian regulatory compliance program for consumer credit and financial services.
  • Oversee ASIC examinations, regulatory notifications, and risk management processes.
  • Manage and develop a team of compliance professionals while partnering with cross-functional teams.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. It is a global fintech company with a remote-first culture and a focus on people-first values.

$86,400–$108,000/yr
Germany

  • Own and run the ISMS, lead ISO 27001 certification, and manage risk, policies, and audits end-to-end.
  • Handle customer security questionnaires, RFIs, and supplier audits independently as the sole security expert.
  • Manage GDPR compliance, including DPAs, subprocessor lists, vendor reviews, and DSARs with operational ownership.

Cosuno is a fast-growing tech startup revolutionizing the construction industry through a digital platform for tenders and procurement, using AI to analyze price data and create efficient bids. They are a lean, 100-person team with a culture of high autonomy, pragmatism, and AI-first thinking, offering a remote-first work environment.

US

  • Support governance and policy development for a large-scale stakeholder engagement contract.
  • Draft and maintain governance documents addressing information security, privacy, and user-access management.
  • Ensure client program office compliance with applicable legal, policy, and regulatory requirements.

Aptive partners with federal agencies to achieve their missions through improved performance, streamlined operations and enhanced service delivery. Founded in 2012, they have 300+ employees nationwide and are committed to a culture of superior client service and innovation.

Global

  • Support the development, implementation, and improvement of our IT compliance framework.
  • Perform ITGC and application controls testing to ensure SOX and regulatory adherence.
  • Facilitate user access reviews, log reviews, and vendor risk management activities.

e.l.f. Beauty, Inc. stands for cruelty-free beauty at an incredible value, with a multi-brand portfolio including e.l.f. Cosmetics, e.l.f. SKIN, Well People, Naturium, and rhode. With over 29 consecutive quarters of net sales growth and $1 billion in net sales in FY25, they are a fast-growing, culturally driven company.

US

  • Lead the design and governance of control frameworks and risk workflows within the GRC platform, ensuring alignment with compliance requirements like HIPAA, HITRUST, and NIST.
  • Oversee risk assessments, control testing, and vendor evaluations to identify and mitigate security risks.
  • Manage policy lifecycle, audit coordination, and reporting on control effectiveness and risk indicators.

USAP is a healthcare organization focused on providing anesthesia services and patient safety. It is a growing company with a culture of security, compliance, and collaboration.

India

  • Manage and conduct internal and external compliance audits for frameworks like ISO, SOC, and NIST.
  • Work with global teams to implement and update compliance controls, policies, and training.
  • Stay updated on regulatory changes and perform gap analysis to maintain certifications.

QAD is building a world-class SaaS company that solves real-world problems in manufacturing and supply chain. They are a growing, virtual-first company with a collaborative culture that values idea-sharing and growth.

Global

  • Provide advisory compliance and real-time trading guidance across all asset classes and regions.
  • Build and maintain a pre-cleared rules framework and oversee regulatory filings and trade surveillance.
  • Supervise two Compliance Officers and represent compliance in cross-functional discussions.

BHFT is a proprietary algorithmic trading firm that manages the full trading cycle across multiple asset classes. With a team of 200+ professionals, 70% of whom are technical specialists, the company values clarity and transparency in its culture.