IT Risk and Compliance Manager

About the role

The IT Risk and Compliance Manager will lead multi‑disciplinary risk assessments across technology, data, operations and cyber domains for KPMG Jamaica’s delivery centre. Reporting to senior leadership, you will translate complex risk findings into actionable recommendations and help shape the firm’s risk‑aware culture.

Key responsibilities

• Lead comprehensive risk assessments covering technology, data, operations and cyber risk, delivering clear insights to leadership.
• Apply deep expertise in second‑ and third‑line data risk management, focusing on data modeling, strategy and governance.
• Design, evaluate and recommend management controls that align with firm policies and risk appetite.
• Analyse evolving risk landscapes to define trade‑offs and propose strategic optimisations.
• Develop and maintain risk and control matrices (RCMs) and risk registers, overseeing the full risk lifecycle from identification to treatment.
• Collaborate with peers, senior leaders and Line of Defense partners to target internal audits toward high‑impact areas.

Required profile

• Bachelor’s degree in Computer Science, Risk Management, Cybersecurity or a related field.
• Minimum five years of risk and compliance experience in a large professional‑services environment.
• Relevant certifications such as CIA, CISA, CISM, CRISC or CISSP.
• Demonstrated understanding of multiple compliance frameworks and risk‑management principles.
• Strong analytical, problem‑solving and communication skills, with the ability to convey technical data to non‑technical audiences.

Required skills

• Data risk management
• Risk assessment and mitigation
• Data modeling
• Development of risk and control matrices
• Risk register management
• Cybersecurity fundamentals