Associate director, Compliance programme manager

Grant Thornton is one of the world’s leading professional services networks with member firms in over 150 countries, 80,000 people and global revenues of $8.5bn. Member firms offer audit, tax, and advisory services to privately owned companies, publicly listed companies, public sector and not for profit organisations, both domestically and internationally.

Grant Thornton International Ltd (GTIL) is the umbrella legal entity for the Grant Thornton global network of member firms. GTIL sets the strategic direction, convenes member firms, connects global communities, and protects the brand and reputation of the network. GTIL and the member firms will continually improve the sustainability of their operations and strive to make a positive impact on clients, people, markets, and the communities in which we operate, in line with the UN’s Sustainable Development Goals (SDGs).

At GTIL, we encourage applications from individuals of all backgrounds, experiences, and perspectives. We believe talent is everywhere. We actively source and encourage applications from all around the globe to encourage new ways of working and tackling complex challenges together.

The primary purpose of this role is to direct and manage the Grant Thornton International Ltd.’s IT Compliance programme which:

• Responds to internal and external compliance assessments (e.g. GDPR, NIST CSF, ISQM1, SOC2, etc.),
• Supports GTIL’s Cybersecurity team in maintaining and communicating policies and standards, and
• Supports IT operations in implementing processes and procedures to improve GTIL’s security and compliance posture.

The ideal candidate will have experience

• Managing IT or security projects,
• Managing compliance programs and assessments, and
• In interacting with all levels of personnel (from executives to associates) within IT, cybersecurity, and business representatives.

The candidate must be able to

• Synthesize information to communicate clearly
• Develop and deliver plans and organise the team to achieve goals,
• Define, implement, and audit technology and security governance requirements (e.g. policies and standards),
• Develop and implement new processes / procedures in support of compliance requirements, and
• Leverage the compliance programme to identify ways to bring value to the GTIL organization and the GT network.

Main Responsibilities

The Associate director will manage and direct IT compliance programme, including:

• Define the ongoing strategy, objectives, and activities for the compliance programme including the necessary budget and resources to support this programme
• Manage the IT compliance team to achieve the strategy and objectives
• Coordinate with executives and stakeholders to clearly define compliance requirements and schedule
• Coordinate between assessors and GTIL to efficiently handle assessments, report results, findings, and remediation actions
• Facilitate the management of risk identification and review across the technology and security organizations
• Provide oversight for IT compliance team activities including:
• Responding to internally initiated assessments (e.g. NIST CSF, SOC2, ISQM1, etc.)
• Defining standards for responding to compliance questions from Grant Thornton’s member firms and ensuring these questions are answered in a timely manner
• Implementing and continually improving compliance related processes, particularly for the collection of evidence to support assessments and compliance questions
• Leveraging the available tools to automate and support efficient compliance processes
• Driving the creation and update of technology and security policies and developing any necessary standards to support these policies
• Developing a method to audit compliance with the technology and security policies and standards
• Providing a framework for the organization to improve business continuity and disaster recovery capabilities

Location

Ideally Canada or UK/Europe.

Person Specification

• Bachelor’s degree or equivalent experience in IT and Cybersecurity (essential)
• Industry certifications such as ISACA-CISA, ISC2-CC, etc. (desirable)
• Extensive experience of programme / project management &lt