SME and Delivery Consultant (New York)

Role SummaryThe Delivery Manager – IT Risk and Controls is responsible for leading the end-to-end delivery of IT risk, controls, compliance, and governance engagements. This role manages project execution, client relationships, delivery quality, team performance, timelines, budgets, risks, and stakeholder communication.The Delivery Manager ensures that IT risk and controls programs are delivered efficiently, meet client expectations, comply with relevant standards, and provide measurable business value.Key ResponsibilitiesLead delivery of IT risk, IT controls, IT audit, SOX, cybersecurity compliance, and GRC engagements. Own project planning, execution, governance, reporting, risk management, and stakeholder communication. Manage delivery teams including SMEs, consultants, analysts, testers, and offshore / nearshore resources. Define project scope, timelines, milestones, work plans, resource plans, and deliverables. Ensure timely and high-quality completion of control assessments, testing, documentation, and remediation tracking. Serve as the primary delivery contact for client stakeholders, internal leadership, audit teams, and technology owners. Monitor project progress, manage dependencies, resolve delivery issues, and escalate risks when required. Review and approve key deliverables such as: Risk-control matrices ITGC testing results Control deficiency reports Remediation plans Status reports Executive dashboards Audit support documentation Ensure delivery aligns with applicable frameworks such as SOX, COBIT, NIST, ISO 27001, ITIL, PCI DSS, GDPR, and internal control standards. Drive governance meetings, steering committee updates, weekly status reviews, and executive reporting. Maintain quality assurance standards across documentation, testing, evidence validation, and issue reporting. Manage client expectations, scope changes, resource constraints, and delivery risks. Identify opportunities for process improvement, control automation, offshore leverage, and delivery optimization. Required Skills and Experience8+ years experience managing IT risk, IT audit, controls, compliance, or GRC engagements. 8+ years experience in project or program delivery experience in consulting, managed services, internal audit, risk advisory, or enterprise technology environments. Good understanding of ITGC, application controls, cybersecurity controls, cloud controls, and regulatory compliance. Experience managing distributed teams and multiple workstreams. Strong knowledge of audit lifecycle, control testing methodology, evidence review, deficiency management, and remediation tracking. Ability to manage senior stakeholders across business, technology, audit, risk, and compliance functions. Excellent communication, leadership, planning, governance, and escalation management skills. Strong ability to balance delivery quality, timelines, budget, scope, and client satisfaction.Posting Date:Department:IT Consulting - 1111910011