Policy & Standard (global Technology Services) - Manager

Policy And Standard Manager

This role oversees the development and management of organizational policies and standards, ensuring they are complete, aligned with relevant regulations and best practices, and effectively communicated and implemented across teams. The position manages the full lifecycle of these policies and standards from review and collaboration to approval, publication, and ongoing monitoring, while supporting audit and compliance activities and promoting readiness for implementation across business and technology groups.

Key Responsibilities:

1. Coordinate policy and standard reviews and approvals through governance forums; guide document owners through publishing and leadership communications.
2. Maintain the policy and standard framework, ensuring alignment with authoritative sources and proper categorization of supporting materials.
3. Manage scheduling and tracking of the full lifecycle—review, approval, publication, and monitoring—including translations where required.
4. Lead pre-implementation planning for updated standards, present rollout plans, and coordinate implementation checklists to ensure compliance.
5. Monitor implementation progress and conduct post-publication reviews to assess compliance and readiness across business units.
6. Respond to audit and regulatory inquiries, prepare evidence packages, and maintain tracking tools for short- and long-term engagements.
7. Collaborate with risk teams to define review timelines, shared repositories, and trackers; ensure reviews are completed before approvals.
8. Draft and distribute change communications; refresh content for notifications and divisional repositories as needed.
9. Prepare materials and agendas for working groups and governance councils, supporting updates and planning for key standards.
10. Maintain trackers and dashboards, generate status reports using Power BI/Excel, and remediate mapping gaps with domain owners.
11. Manage group mailbox processes and triage incoming requests related to policies and standards.

Preferred Skills:

• Experience with policy and standard management workflows and tools such as Policy & Standard Center, Power BI, Excel, SharePoint, and Microsoft Teams for collaboration.
• Exposure to key technology domains like Network Security and Identity & Access Management (IAM), including coordination of implementation activities.

Qualifications and Skills:

• Background in Information Security or Technology Governance with hands-on experience in managing policy and standard lifecycles, as well as first-line risk and control functions within a global organization.
• Familiarity with ISO/IEC 27001 practices and regulatory frameworks, including the ability to prepare and organize evidence for audits and regulatory reviews.
• Working knowledge of authoritative sources (e.g., NIST 800-53, CSA CCM, COBIT, FFEIC, NIST CSF 2.0) and experience mapping requirements across policies and standards.
• Strong stakeholder engagement and facilitation skills across multiple teams and governance forums; excellent written communication for policy updates and leadership briefings.

Success Metrics / KPIs:

• Lifecycle Completion: Percentage of standards completing review and publishing processes by planned dates.
• Review SLA Adherence: Percentage of changes reviewed within agreed timelines; zero instances advancing without required reviews.
• Implementation Readiness: Completion rate of implementation checklists and remediation of gaps identified during pre-implementation planning.
• Audit and Regulatory Response Quality: Timeliness and completeness of evidence submissions.
• Digitization Coverage: Progress toward mapping authoritative sources and maintaining repositories.

Key Internal Interfaces:

• Governance Forums: Facilitate reviews and approvals through working groups and policy forums.
• Risk Management: Coordinate with risk teams on review timelines, SLA adherence, and tracking.
• Leadership Communication: Provide updates and awareness on published changes to senior leadership.

Tools & Platforms:

• SharePoint and Policy & Standard Center for document management
• Microsoft Teams for collaboration
• Power BI and Excel for dashboards and reporting
• Archer for risk and compliance tracking
• Divisional repositories and team mailboxes for process management.