GRC and PMO Compliance Officer

India, KA, Bangalore

Regular

Apply

* * *

Key Job Details

Product

Dassault Systèmes

Ref ID

549511

•         Define third-party risk management requirements based on applicable regulations, standards, and internal policies (e.g., ISO 9001, ISO 27x01, SOC 2, NIST, GDPR, NIS2, CRA, FedRAMP).

•         Identify stakeholders and conduct a current-state assessment of existing third-party risk policies and practices

•         Facilitate working groups to define a common risk management framework that is comprehensive without being overbearing driving consensus on policy, risk appetite, control ownership, and evidence collection

Program Management

•         Build a program plan to manage objectives, scope, timeline, budget, workflow configuration, and integration with existing systems.

•         Manage program status and progress and provide regular updates to key stakeholders and sponsors escalating issues and risks that threaten timeline, scope, or budget

•         Identify and actively manage dependencies, risks, and conflicts across project workstreams and related projects

•         Define and track program KPIs to measure status and progress and overall program value

•         Serve as primary point of contact with workstream leaders, and other key stakeholders

•         Manage the training and deployment TPRM program to operational teams

On-going program operations

•         Monitor third-party risk metrics and report on program maturity, open findings, and remediation progress

•         Track regulatory and industry changes and update the framework accordingly

•         Support due diligence reviews, contract risk language, and escalations for high-risk vendors

•         Provide training and guidance to stakeholders on third-party risk requirements and processes