Governance, Risk, and Compliance Manager
Responsible for regulatory compliance including GDPR, ISO 27001, NIS2, and DORA; manages risk analyses and security audits.
About
The Governance, Risk, and Compliance Manager ensures that the organization adheres to relevant regulatory frameworks such as GDPR, ISO 27001, NIS2, and DORA. This role involves overseeing risk management processes, conducting security audits, and implementing compliance strategies to protect the organization's information assets and maintain regulatory standards.
Entering the profession — New Zealand
L'accès à ce métier se fait généralement par des programmes de diplômés, des promotions internes au sein des départements juridiques ou d'audit, ou par une reconversion ciblée depuis des métiers liés à la finance ou au contrôle interne.
Training — New Zealand
La formation repose sur un cursus professionnel orienté vers le droit, la gestion des risques, la finance ou l'administration des affaires, complété par des certifications spécialisées en conformité et gouvernance.
The job market — New Zealand
Le marché montre une demande modérée mais stable avec une croissance liée à l'importance croissante de la conformité réglementaire et de la gestion des risques dans divers secteurs, notamment la finance, la santé et l'administration publique.
Skills
Technical skills
- Possess in-depth knowledge of GDPR, ISO 27001, NIS2, and DORA regulations.
- Expertise in risk assessment and management methodologies.
- Proficiency in security audit procedures and tools.
- Experience in compliance program development and implementation.
- Skilled in incident management and response.
- Capable of policy drafting and documentation.
- Familiarity with IT security frameworks.
Interpersonal skills
- Analytical thinking and attention to detail.
- Strong communication and reporting skills.
- Ability to coordinate cross-functional teams effectively.
- Problem-solving and decision-making capabilities.
- Integrity and ethical judgment in all actions.
- Adaptability to regulatory changes and updates.
- A proactive and organized approach to tasks.
Tasks
- Develop and maintain compliance programs aligned with GDPR, ISO 27001, NIS2, and DORA regulations.
- Conduct comprehensive risk assessments and security audits.
- Monitor regulatory changes and update policies accordingly.
- Coordinate with internal teams to implement compliance measures.
- Report compliance status and risk findings to senior management.
- Manage incident response related to compliance breaches.
- Train staff on compliance requirements and best practices.
- Ensure documentation and evidence for audits are complete and accurate.
- Collaborate with external auditors and regulatory bodies.
- Support continuous improvement of governance and risk frameworks.
Work environments
Work environments for professionals in this sector may vary:
Career paths
- Advance to the role of Chief Compliance Officer overseeing all compliance functions.
- Progress to become a Chief Risk Officer managing overall risk strategies.
- Transition into an Information Security Manager role leading security initiatives.
- Take on responsibilities as a Data Protection Officer ensuring data privacy.
- Evolve into a Senior Risk Consultant providing expert advisory services.
