Who We Are
Artmac Soft is a technology consulting and service-oriented IT company dedicated to providing innovative technology solutions and services to Customers.
Job Description
Job Title : Global Compliance and Regulatory Risk Management Lead
Job Type : W2
Experience : 8 to 15 years
Location : Plano, Texas (Onsite)
Responsibilities
- A minimum of 3 - 5 years of experience in global compliance, regulatory requirements, risk management, and information security.
- Demonstrated experience in mapping control frameworks to regulatory requirements, particularly NIST CSF.
- In depth knowledge of global regulatory standards, including but not limited to DORA and APRA.
- Conduct comprehensive mapping of the existing control framework (NIST CSF 2.0) to global regulatory requirements such as NY DFS, GDPR, Digital Resilience Operations Act (DORA), APAC Prudential Standard CPS234, etc.
- Develop detailed control implementation descriptions to demonstrate how the organization meets and adheres to these regulations.
- Collaborate with internal stakeholders within Information Security & Risk Management to identify gaps in the current control framework and recommend necessary adjustments. Monitor and interpret changes in global regulatory requirements and ensure timely updates to the control framework.
- Provide subject matter expertise in global compliance, regulatory requirements, risk management, and security controls.
- Maintain a thorough understanding of the NIST Cybersecurity Framework (CSF) and other relevant standards.
- Strong analytical and problem solving skills with a keen attention to detail.
- Excellent communication and interpersonal skills, with the ability to effectively convey complex information to diverse audiences.
- Proven ability to work independently and collaboratively in a fast paced environment.
- Strong organizational skills and the ability to manage multiple tasks and projects simultaneously
Qualification
- Bachelor's degree in Information Security, Risk Management, Compliance, or a related field.
- Advanced degrees or relevant certifications (e.g., CISSP, CISM, CRISC) are highly desirable.