GRC and PMO Compliance Officer

GRC and PMO Compliance Officer 
Unlock your potential with Dassault Systèmes, a global leader in Scientific Software Engineering, as a GRC and PMO Compliance Officer in Bangalore, Karnataka!

Our compliance function is responsible for ensuring that the company meets its regulatory and market-driven compliance obligations efficiently, consistently, and at scale. Working under the direction of the Compliance Program Office, with key stakeholders from R&D, IT, Procurement, and Legal, this role is responsible defining and implementing a Third-Party Risk Management Program.

As the Third-Party Risk Program Manager, you will work collaboratively with R&D, IT, Procurement, Legal teams to assess current supplier risk practices and design and implement a common risk management framework that is integrated into our enterprise-wide Governance, Risk and Compliance program.  

Role Description & Responsibilities:

•         Define third-party risk management requirements based on applicable regulations, standards, and internal policies (e.g., ISO 9001, ISO 27x01, SOC 2, NIST, GDPR, NIS2, CRA, FedRAMP).

•         Identify stakeholders and conduct a current-state assessment of existing third-party risk policies and practices

•         Facilitate working groups to define a common risk management framework that is comprehensive without being overbearing driving consensus on policy, risk appetite, control ownership, and evidence collection

Program Management

•         Build a program plan to manage objectives, scope, timeline, budget, workflow configuration, and integration with existing systems.

•         Manage program status and progress and provide regular updates to key stakeholders and sponsors escalating issues and risks that threaten timeline, scope, or budget

•         Identify and actively manage dependencies, risks, and conflicts across project workstreams and related projects

•         Define and track program KPIs to measure status and progress and overall program value

•         Serve as primary point of contact with workstream leaders, and other key stakeholders

•         Manage the training and deployment TPRM program to operational teams

On-going program operations

•         Monitor third-party risk metrics and report on program maturity, open findings, and remediation progress

•         Track regulatory and industry changes and update the framework accordingly

•         Support due diligence reviews, contract risk language, and escalations for high-risk vendors

•         Provide training and guidance to stakeholders on third-party risk requirements and processes

•         Serve as a point of contact for internal and external compliance audits

•         Monitor and measure the value of the TPRM program and optimize it to achieve the greatest value

•      Manage highly-matrixed program with senior-level stakeholders from across the globe

•      Program deliverables and formal communication (kick-off, status, workshops) will be conducted in English

•      Work as a quick problem-solver and critical thinker in a fast-paced environment.

•      Work independently and within a global, collaborative team structure to solve complex problems.

•      This position in on-site in our Paris HQ reporting into the Compliance Program Office