• Leads the gathering and organization of assessment data and results to support risk reporting and monitoring processes • Advises, designs, and/or validates the status of IT controls and processes • Assists in the design of corrective actions to address control deficiencies • Consults with control owner(s) to innovate and implement controls to minimize/mitigate risks • Ensures stakeholders incorporate new controls and/or updates into testing • Understands and assesses levels of risk and compliance across the enterprise • Develops and/or matures metrics to deliver reports and presentations to management personnel • Maintains risk register with risk treatment plans • Performs assessments of an IT Risk Acceptance request to identify risks and mitigating controls