Senior Technical Lead
Senior Technical Lead
Job Summary
| GRC Consultant – SG Mobile Banking Program |
| Role Summary |
| Responsible for embedding regulatory compliance assurance throughout the Société Générale Mobile Banking application lifecycle, ensuring the solution aligns with applicable regulatory requirements, Bank security policies, and compliance controls from design through production deployment. |
| Key Responsibilities |
| · Identify and assess applicable regulatory and compliance requirements for the solution. |
| · Develop and maintain the Compliance Control Catalogue covering applicable requirements, ownership, evidence, and validation criteria, against the solution. |
| · Provide compliance and governance advisory throughout design, development, testing, and deployment. |
| · Conduct regulatory control assessments and identify risks and observations. |
| · Review compliance evidence and documentation for control validation and audit readiness. |
| · Document remediation actions for identified compliance gaps and risks. |
| · Track compliance risks, observations, and remediation actions through project governance. |
| Required Experience & Skills |
| · Strong experience in IT Governance, Risk and Compliance, preferably within banking, financial services, digital banking, or mobile application transformation programs. |
| · Practical knowledge of DORA, NIS2, GDPR, PSD2/PSD3, eIDAS, and financial-sector regulatory compliance requirements. |
| · Experience in translating regulatory obligations and security policies into applicable control requirements, evidence expectations, and validation criteria. |
| · Strong understanding of application and technology controls. |
| · Experience conducting compliance control assessments, evidence reviews, risk identification, and remediation tracking. |
| · Ability to review architecture documents, data flows, interface specifications, security designs, test evidence, operational procedures, and project documentation from a compliance perspective. |
| · Experience supporting compliance activities across Agile and DevSecOps delivery lifecycles. |
| · Strong analytical, documentation, stakeholder-management, governance, and reporting skills. |
| · Relevant certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, CRISC, COBIT, or CIPP/E. |
| Key Deliverables |
| Compliance Control Catalogue | Compliance Reviews and Assessment | Risk and Issue Register | Remediation Action Tracker | Compliance Status Dashboard | Evidence Records |
Key Responsibilities
| GRC Consultant – SG Mobile Banking Program |
| Role Summary |
| Responsible for embedding regulatory compliance assurance throughout the Société Générale Mobile Banking application lifecycle, ensuring the solution aligns with applicable regulatory requirements, Bank security policies, and compliance controls from design through production deployment. |
| Key Responsibilities |
| · Identify and assess applicable regulatory and compliance requirements for the solution. |
| · Develop and maintain the Compliance Control Catalogue covering applicable requirements, ownership, evidence, and validation criteria, against the solution. |
| · Provide compliance and governance advisory throughout design, development, testing, and deployment. |
| · Conduct regulatory control assessments and identify risks and observations. |
| · Review compliance evidence and documentation for control validation and audit readiness. |
| · Document remediation actions for identified compliance gaps and risks. |
| · Track compliance risks, observations, and remediation actions through project governance. |
| Required Experience & Skills |
| · Strong experience in IT Governance, Risk and Compliance, preferably within banking, financial services, digital banking, or mobile application transformation programs. |
| · Practical knowledge of DORA, NIS2, GDPR, PSD2/PSD3, eIDAS, and financial-sector regulatory compliance requirements. |
| · Experience in translating regulatory obligations and security policies into applicable control requirements, evidence expectations, and validation criteria. |
| · Strong understanding of application and technology controls. |
| · Experience conducting compliance control assessments, evidence reviews, risk identification, and remediation tracking. |
| · Ability to review architecture documents, data flows, interface specifications, security designs, test evidence, operational procedures, and project documentation from a compliance perspective. |
| · Experience supporting compliance activities across Agile and DevSecOps delivery lifecycles. |
| · Strong analytical, documentation, stakeholder-management, governance, and reporting skills. |
| · Relevant certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, CRISC, COBIT, or CIPP/E. |
| Key Deliverables |
| Compliance Control Catalogue | Compliance Reviews and Assessment | Risk and Issue Register | Remediation Action Tracker | Compliance Status Dashboard | Evidence Records |
Skill Requirements
| GRC Consultant – SG Mobile Banking Program |
| Role Summary |
| Responsible for embedding regulatory compliance assurance throughout the Société Générale Mobile Banking application lifecycle, ensuring the solution aligns with applicable regulatory requirements, Bank security policies, and compliance controls from design through production deployment. |
| Key Responsibilities |
| · Identify and assess applicable regulatory and compliance requirements for the solution. |
| · Develop and maintain the Compliance Control Catalogue covering applicable requirements, ownership, evidence, and validation criteria, against the solution. |
| · Provide compliance and governance advisory throughout design, development, testing, and deployment. |
| · Conduct regulatory control assessments and identify risks and observations. |
| · Review compliance evidence and documentation for control validation and audit readiness. |
| · Document remediation actions for identified compliance gaps and risks. |
| · Track compliance risks, observations, and remediation actions through project governance. |
| Required Experience & Skills |
| · Strong experience in IT Governance, Risk and Compliance, preferably within banking, financial services, digital banking, or mobile application transformation programs. |
| · Practical knowledge of DORA, NIS2, GDPR, PSD2/PSD3, eIDAS, and financial-sector regulatory compliance requirements. |
| · Experience in translating regulatory obligations and security policies into applicable control requirements, evidence expectations, and validation criteria. |
| · Strong understanding of application and technology controls. |
| · Experience conducting compliance control assessments, evidence reviews, risk identification, and remediation tracking. |
| · Ability to review architecture documents, data flows, interface specifications, security designs, test evidence, operational procedures, and project documentation from a compliance perspective. |
| · Experience supporting compliance activities across Agile and DevSecOps delivery lifecycles. |
| · Strong analytical, documentation, stakeholder-management, governance, and reporting skills. |
| · Relevant certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, CRISC, COBIT, or CIPP/E. |
| Key Deliverables |
| Compliance Control Catalogue | Compliance Reviews and Assessment | Risk and Issue Register | Remediation Action Tracker | Compliance Status Dashboard | Evidence Records |
Other Requirements
| GRC Consultant – SG Mobile Banking Program |
| Role Summary |
| Responsible for embedding regulatory compliance assurance throughout the Société Générale Mobile Banking application lifecycle, ensuring the solution aligns with applicable regulatory requirements, Bank security policies, and compliance controls from design through production deployment. |
| Key Responsibilities |
| · Identify and assess applicable regulatory and compliance requirements for the solution. |
| · Develop and maintain the Compliance Control Catalogue covering applicable requirements, ownership, evidence, and validation criteria, against the solution. |
| · Provide compliance and governance advisory throughout design, development, testing, and deployment. |
| · Conduct regulatory control assessments and identify risks and observations. |
| · Review compliance evidence and documentation for control validation and audit readiness. |
| · Document remediation actions for identified compliance gaps and risks. |
| · Track compliance risks, observations, and remediation actions through project governance. |
| Required Experience & Skills |
| · Strong experience in IT Governance, Risk and Compliance, preferably within banking, financial services, digital banking, or mobile application transformation programs. |
| · Practical knowledge of DORA, NIS2, GDPR, PSD2/PSD3, eIDAS, and financial-sector regulatory compliance requirements. |
| · Experience in translating regulatory obligations and security policies into applicable control requirements, evidence expectations, and validation criteria. |
| · Strong understanding of application and technology controls. |
| · Experience conducting compliance control assessments, evidence reviews, risk identification, and remediation tracking. |
| · Ability to review architecture documents, data flows, interface specifications, security designs, test evidence, operational procedures, and project documentation from a compliance perspective. |
| · Experience supporting compliance activities across Agile and DevSecOps delivery lifecycles. |
| · Strong analytical, documentation, stakeholder-management, governance, and reporting skills. |
| · Relevant certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, CRISC, COBIT, or CIPP/E. |
| Key Deliverables |
| Compliance Control Catalogue | Compliance Reviews and Assessment | Risk and Issue Register | Remediation Action Tracker | Compliance Status Dashboard | Evidence Records |