Manager, Governance, Risk and Compliance
Core
Lead compliance audit programs, manage contractual information security obligations, and drive risk management for Thomson Reuters' Asia and Emerging Markets region.
Role type
Manager, Governance, Risk and Compliance (GRC)
Builds
Compliance audit programs, contractual security obligations, and risk management frameworks for APAC, Middle East, Africa, and Japan.
Domain
Information Security Governance, Risk, and Compliance (GRC) in the Legal, Tax, and Media industries.
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
ISO 27001, ISO 9001, SOC 1, SOC 2 Type II, IRAP, GRC platforms (e.g., Protecht), regulatory interpretation, audit program management, contract negotiation, stakeholder management.
Preferred skills
CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, CISA, cloud environments (AWS, Azure, GCP), privacy regulations (PDPA, PIPL, POPIA), AI governance.
Technologies
Protecht, AWS, Azure, Google Cloud Platform
Responsibilities
Lead and coordinate regional compliance audit programs (ISO, SOC, IRAP); review and negotiate information security clauses in customer contracts; maintain SOPs and support process alignment; conduct information security risk assessments and develop remediation plans; monitor the regulatory landscape across APAC, Middle East, Africa, and Japan.
Seniority
Manager, hands-on IC
