Sr. IT Risk Management and Compliance Specialist

Job type:
Full-Time

Type of role:
Hybrid

About Lubrizol
The Lubrizol Corporation, a Berkshire Hathaway company, is a specialty chemical company whose science delivers sustainable solutions to advance mobility, improve wellbeing and enhance modern life. Founded in 1928, Lubrizol owns and operates more than 100 manufacturing facilities, sales, and technical offices around the world and has about 8,000 employees. For more information, visit

We value diversity in professional backgrounds and life experiences. By enabling a consistent, unbiased, and transparent recruitment process, Lubrizol seeks to create a positive experience for candidates so we can get to know them at their best. We recognize unique work and life situations and offer flexibility, ensuring our employees feel engaged and fulfilled in every aspect of life.

Join Our Thriving Team at Lubrizol as a Sr. IT Risk Management and Compliance Specialist

Unleash Your Potential. At Lubrizol, we're transforming the chemical industry and looking for exceptional talent to join us on this journey. If you are ready to join an international company with talent around the world and want to make a real impact, we want you on our team.

What You'll Do:

As a Sr. IT Risk Management and Compliance Specialist, you'll be a key resource in the development and continuous improvement of all aspects of the company's global Information Security program, including Third Party Risk Management. You'll collaborate with a diverse group of passionate individuals to deliver sustainable solutions to advance mobility, improve wellbeing and enhance modern life.

You will help lead the development and execution of enterprise-wide risk strategies and processes, mentor junior team members, and serve as a key advisor to leadership on compliance trends.

This role entails the ongoing utilization and enhancement of our risk management, compliance, and governance programs. You will be a partner with technical teams to advise on applicable control requirements and potential solutions, ensuring that third-party relationships are managed effectively and securely.

In addition to Third Party Risk Management, you will also be involved in internal auditing activities. You will participate in measuring and reporting compliance with IT policies and standards to leadership, conducting audits and mentoring junior team members to conduct audits to assess the effectiveness and efficiency of risk management processes. This includes evaluating internal controls, identifying areas for improvement, and recommending and implementing enhancements to the program.

Furthermore, you will be responsible for responding to external requests related to IT risk management and compliance. They will collaborate with relevant stakeholders to address inquiries, provide necessary documentation, and ensure compliance with external regulations and standards.

The Senior IT Risk Management and Compliance Specialist plays a critical role in ensuring the global impact and importance of Lubrizol's Information Security program by managing risks, conducting internal audits, and responding to external requests

• Execute the IT Risk Management processes to identify, assess, evaluate, and treat risks, ensuring the global impact and importance of Lubrizol's Information Security program.
• Recommend and implement Risk Management, Compliance, and Governance Programs process improvements to enhance the effectiveness and efficiency.
• Facilitate and conduct technology and operational risk and compliance assessments to identify potential risks and ensure compliance with internal policies and external regulations.
• Respond to and support risk assessments or audits from external and internal customers, providing necessary documentation and addressing inquiries to ensure compliance and risk mitigation.
• Partner with technical teams, advising on applicable control requirements and proposing potential solutions to address identified risks, fostering a secure and compliant environment.
• Conduct compliance assessments of controls for in-scope systems, including remediation assessments and audit-readiness assessments, to ensure adherence to IT policies and…