Position Summary 

We are seeking an experienced risk and compliance leader to join our team within the F5 Digital organization. As a Senior Manager, you are responsible for building and leading a team establishing and continuously developing the global Digital risk management and compliance framework, deployment roadmap, risk monitoring and reporting, and risk and compliance assurance for the entire Digital organization. You will facilitate effective decisions by defining, maintaining, communicating, and promoting Digital risk and compliance frameworks and control management within Digital at all levels and collaborating with all audit and risk organizations across the enterprise. We are looking for risk management professionals who possess imagination, creativity, and vision which can be employed to build control processes and solutions that are tailored to the unique needs of our organization. You will build for the future by designing monitoring, testing, and risk management procedures to identify and evaluate risk exposures and determine the effectiveness and efficiency of controls. 

Primary Responsibilities: 

• Build, lead and manage a growing risk and compliance team. 

• Translate security and compliance requirements into projects and tasks, prioritize tickets, remove blockers, and track dependencies across multiple teams. 

• Partner with existing teams to facilitate and project manage recurring programs including IAM and access control, change management, business continuity and disaster recovery, asset management, incident management, and annual policy review. 

• Develop policy, procedure, and process to ensure that controls are compliant with regulations and policies in partnership with teams across the Digital organization. 

• Lead risk identification efforts to proactively assess and evaluate critical areas of exposure, ensuring timely reporting and mitigation planning in coordination with leadership. 

• Define Sarbanes-Oxley (SOX) ITGC, ISO 27001, and other applicable compliance goals and ensure that methods and measurements are in place. 

• Review, document, and identify gaps in current control processes while charting the path to remediation. You will work in close collaboration with our operational partners to drive gaps to closure and make meaningful and lasting changes to our processes. 

• Serve as a point-of-contact for violations of regulations, policy, and procedures.  

• Be a main point of contact for Digital Risk and Compliance and assist all internal and external audit teams where required. 

• Lead compliance certifications and represent Digital in broader enterprise certifications. 

• Drafting responses to findings and memos for SOX and other audit and certification findings. 

• Influencing the culture of the Digital organization to embed a risk and compliance mindset into all processes. 

Knowledge, Skills and Abilities 

• Proven experience building and leading IT risk and compliance teams, partnering with internal audit and external auditors. 

• Excellent leadership and team management skills, with the ability to inspire and motivate teams. 

• Expert knowledge of technology and cyber risks and experience in working and collaborating with cross functional teams leading risk management and compliance programs. 

• Common frameworks and standards such as NIST and ISO. 

• Experience performing ISO 27001, NIST, SOX, or equivalent standards consulting, reviews and assessments. 

• Knowledge and experience of key legal and regulatory compliance, e.g. SOX, FedRAMP, GDPR, CCPA. 

• ServiceNow Integrated Risk Module or comparable experience. 

• Excellent project and program management skills and experience. 

• Demonstrated ability to lead and influence to gain consensus; experience in partnering with executive and senior management. 

• Ability to explain technical or complex issues and concerns in non-technical ways. 

• Ability to deliver results while working with remote, virtual, and cross-functional teams without direct authority. 

• Good presentation, meeting facilitation, negotiation, and conflict management skills. 

• Exceptional analytical and problem-solving skills with attention to detail and accuracy. 

• Ability to adapt to changing requirements quickly while maintaining accountability. 

• Ability to build strong, sustainable relationships with diverse internal and external partners at all levels. 

Qualifications 

• BS/BA degree in a risk, compliance, audit, or computer related field; or equivalent industry experience. 

• 10+ years related experience with a minimum of 8 years leading Governance, Risk, and Compliance or internal audit functions at technology-based companies or in technical domains. 

• Certified as a risk professional; RIMS-CRMP, CRISC, CCSFP, or PMI-RMP qualification is preferred. 

• Demonstrated knowledge of IT.  

• Additional relevant certifications such as, CISM, CISA, CCSFP, CIA, CISSP, PMP, or equivalent preferred.