IT RISK AND COMPLIANCE MANAGER

Om jobbet

Job description

The IT Risk & Compliance Manager will play a pivotal role in supporting Compliance 360's clients with their

technology-related governance, risk, and compliance needs. This role focuses on assessing clients' IT

environments, identifying risks, strengthening controls, and ensuring alignment with regulatory

expectations, including DORA and applicable EU/Malta frameworks.

The selected candidate will contribute directly to the delivery of high-quality client engagements, work

closely with senior stakeholders within client organisations, and support the ongoing development of

Compliance 360's service offering in the IT governance and cyber-risk domain.

Key Responsibilities

-Assume ICT-related roles or responsibilities on behalf of clients, including duties linked to DORA,

ICT governance, ICT risk oversight, and related regulatory expectations, ensuring that all

obligations are executed in line with supervisory standards and industry best practice.

-Develop a thorough understanding of the clients' IT landscape, including risks, controls, and

business requirements

-Conduct IT audit programs based on risk assessments, identifying critical risk areas, and providing

tailored recommendations

-Conduct cybersecurity-focused audit reviews, including assessments of security controls, access

management, vulnerabilities, and incident-response readiness

-Lead initiatives related to cybersecurity governance, risk management, and compliance

-Conduct internal audits focused on IT risk and compliance for a diverse client portfolio, ensuring

timely delivery consistently high-quality outputs

-Contribute to the development of innovative solutions that align with client needs and market

trends

-Ensure timely completion of client projects and meet deadlines

-Identify and pursue new business opportunities

Requirements

Qualifications

-A degree in Information Technology, Computer Science, Business Administration, or a related field

-Certifications such as CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor, or ISO 27001 Lead

Implementer will be considered an asset

Vacancy additional information

Experience

- At least five years' experience in IT governance, risk management, compliance, and/or auditing

under Malta and EU regulations

-A strong understanding of IT regulatory standards, including DORA

Skills

-Able to work both independently and collaboratively within project teams to deliver high-quality

outcomes

-Show strong interpersonal skills and the ability to build productive relationships with clients and

team members

-Proficient in conducting complex analyses and presenting findings clearly and effectively to

diverse audiences with varying technical expertise and seniority levels

-Possess solid project management skills

-Proactive, self-motivated and able to take initiative

-Excellent communication skills in English

-Able to work with minimal supervision

Training provided

On the job training will be provided to the selected candidate

Any other benefits

Health Insurance

Wellness benefits

Hybrid working

Summer hours

Flexible hours

Study leave

Assistance in pursuit of studies

How will the interviews be held

Preferably online but will adapt according to circumstances