Subject matter expert for IT general controls within Group AI and Technology, responsible for setting standards, monitoring, and independent testing of ITGCs.
Locations (2)
London, England, United Kingdom
Spain
Responsibilities
Own the second‑line ITGC framework and control library
Set control standards and evidence requirements
Maintain risk and control matrix
Provide independent oversight and challenge of first‑line controls
Advise system owners on control design
Requirements
Relevant professional qualification such as CRISC or CISA
The Compliance Manager, CMP & GRC is responsible for leading Cboe's Compliance Monitoring Program (“CMP”), implementing risk-based compliance control testing and monitoring, driving program enhancements, and supporting alignment with Cboe's governance, risk, and compliance (“GRC”) initiative.
Compensation
The anticipated base salary range for this role is $121,550-$157,300
Responsibilities
Lead day-to-day implementation of the CMP, including annual planning, compliance testing and monitoring, issues tracking and validation, and reporting.
Own and maintain the annual CMP plan, working with risk assessment data and partners across the Three Lines to scope, schedule, and prioritize testing and monitoring activities on a compliance risk basis.
Plan and execute compliance testing reviews and compliance monitoring activities: scope based on risk profile, evaluate effectiveness of controls in meeting regulatory obligations and providing strong internal risk mitigation, and create findings as appropriate, documenting results within the GRC platform.
Track and validate compliance issues and mitigation plans.
Identify opportunities, establish action plans, and drive solutions to continuously mature the CMP program as the GRC platform and its underlying processes evolve.
The Compliance Manager, CMP & GRC is responsible for leading Cboe's Compliance Monitoring Program (CMP), implementing risk-based compliance control testing and monitoring, driving program enhancements, and supporting alignment with GRC initiatives.
Compensation
The anticipated base salary range for this role is $121,550-$157,300
Responsibilities
Lead day-to-day implementation of the CMP, including annual planning, compliance testing and monitoring, issues tracking and validation, and reporting.
Own and maintain the annual CMP plan, working with risk assessment data and partners across the Three Lines to scope, schedule, and prioritize testing and monitoring activities.
Plan and execute compliance testing reviews and compliance monitoring activities.
Track and validate compliance issues and mitigation plans.
Identify opportunities, establish action plans, and drive solutions to continuously mature the CMP program as the GRC platform and its underlying processes evolve.
Support risk culture and governance agenda across Consumer Insurance, coordinating governance forums, risk profiling, and implementing enterprise risk frameworks and policies.
Responsibilities
Coordinate risk governance forums, including forward calendars, agendas, papers, actions and reporting.
Prepare clear governance and executive papers that highlight material risks, issues, insights and recommended actions.
Support risk profiling, thematic reviews and analysis of emerging risks, control weaknesses and systemic issues.
Help translate new and changing risk policies and frameworks into practical requirements and implementation plans.
Support risk culture initiatives, measures and reporting to strengthen risk‑conscious decision‑making.
Lead risk and compliance assurance activities in Malaysia, supporting the Head of Risk and Compliance Assurance and ensuring regulatory compliance and governance across the organization.
Responsibilities
Support the Head of Risk and Compliance Assurance - Malaysia in executing the Malaysia assurance strategy and annual plan
Lead delivery of assigned reviews and portfolio activities
Act as a senior in-country representative for Risk and Compliance Assurance
Provide clear conclusions on control design and operating effectiveness
Escalate material control deficiencies and emerging risks
Requirements
Relevant degree and/or recognised professional qualification in risk, compliance, audit, financial crime or a related discipline