Senior Manager, IS Governance

About the role

The Senior Manager, IS Governance ensures that the bank’s Information Security Governance, Risk, and Compliance (GRC) initiatives are aligned with its overall risk strategy, regulatory obligations, and ESG commitments. The role drives automation, risk visibility, and accurate reporting across the Information Security Group.

Key responsibilities

• Maintain alignment of IS GRC activities with internal policies, regulatory standards, and ESG objectives.
• Develop and manage a comprehensive policy‑exception process, including documentation, approval workflows, risk assessments, and periodic audits.
• Coordinate Risk Control Self‑Assessments (RCSAs) across business units, analyse results, and produce actionable reports.
• Oversee offshoring risk reporting, ensuring compliance with regulatory requirements and internal controls.
• Leverage automation to streamline GRC processes, enhance risk visibility, and support board‑level ESG disclosures.
• Support senior leadership in preparing executive, board, and regulator responses related to ESG‑focused cybersecurity governance.

Required profile

• Extensive experience in information security governance, risk management, and compliance within a financial institution.
• Strong understanding of ESG frameworks and how they intersect with cybersecurity controls.
• Proven ability to lead cross‑functional teams and manage complex stakeholder relationships.
• Excellent analytical and reporting skills, with a track record of delivering clear, actionable insights.

Required skills