IT Governance and Risk Specialist

We are seeking a mid-career individual contributor to join our team as an IT Governance and Risk Specialist, reporting directly to the Head of IT Governance. The primary purpose of this role is to support technology risk reviews, document control effectiveness, and coordinate remediation efforts across the organization. You will be responsible for balancing operational impact, compliance requirements, and information security standards throughout all governance activities. On a daily basis, you will maintain decision-ready IT risk registers, evidence logs, and review schedules to ensure continuous compliance visibility. A key aspect of this position involves assessing control gaps identified through internal reviews and system changes using structured risk analysis and prioritization. You will actively coordinate with remediation owners to establish practical deadlines and collect verification evidence for closure. Additionally, you will prepare concise and actionable risk reporting tailored for both technology teams and business stakeholders. The ideal candidate will champion policy awareness and secure information handling practices across cross-functional groups. Finally, you must apply strong ethical judgment to escalate significant findings, high-priority gaps, or any requests to bypass established controls, such as incomplete access reviews during critical business releases.