Perform end-to-end risk assessments across business units, identifying vulnerabilities and recommending mitigation strategies.
Develop and maintain risk registers, control frameworks, and compliance documentation.
Collaborate with stakeholders (Finance, Compliance, IT, Operations) to gather and analyze risk-related data.
Ensure alignment with regulatory standards (ISO 27001, GDPR, SOX, CCPA) and internal policies.
Monitor Key Risk Indicators (KRIs) and prepare reports for senior leadership.
Support internal audits and assist in external regulatory reviews.
Work closely with Risk Type Controllers and second-line functions for IS risk reporting.