Manager, Governance, Risk and Compliance

Manager, Governance, Risk and Compliance — Asia and Emerging Markets

Are you passionate about building resilient compliance programs that protect customers and the business across one of the world's most dynamic and diverse regions? Do you thrive at the intersection of information security governance, risk, and regulatory compliance in a fast-paced global environment?

Thomson Reuters is seeking a Manager, Governance, Risk and Compliance to join our Governance, Risk and Compliance team, supporting the Asia and Emerging Markets (AEM) region spanning APAC, the Middle East, Africa, and Japan. In this role you will serve as the primary compliance and assurance lead for the region, driving audit programs, managing contractual information security obligations, and acting as a trusted advisor to internal and external stakeholders.

This is a high-impact, highly visible role that sits at the intersection of compliance operations, customer assurance, and strategic risk management across a broad portfolio of markets and regulatory environments.

This role is based in Melbourne.

About the Role

In this opportunity as Manager, Governance, Risk and Compliance, you will:

• Lead and coordinate the AEM region's compliance audit program, including ISO 27001, ISO 9001, ISO 42001, SOC 1, SOC 2 Type II, and IRAP assessments, while managing auditor relationships, evidence collection, findings, and corrective actions.

• Review and negotiate information security obligations within customer contracts, including non-standard commitments, working closely with Legal and securing appropriate approvals where required.

• Maintain SOPs and support process alignment between Customer Assurance and GRC, contributing to continuous improvement of operational workflows.

• Build and maintain strong relationships with internal stakeholders, including Legal, BISOs, Product Teams, and Global Compliance, as well as external auditors and customers across the AEM region.

• Drive risk management and compliance activities across assigned technology platforms by interpreting and applying relevant regulatory, legal, contractual, and security requirements.

• Conduct and support information security risk assessments, identify control gaps, and develop remediation plans aligned with Thomson Reuters' global frameworks.

• Monitor the regulatory landscape across APAC, the Middle East, Africa, and Japan, while promoting security awareness, compliance culture, and opportunities for automation and continuous improvement.

About You

You’re a fit for the role of Manager, Governance, Risk and Compliance, if you have the following required qualifications:

• Proven experience in information security governance, risk and compliance, cybersecurity compliance, or technology risk, preferably within a large national or global organisation.

• Strong working knowledge of security and compliance frameworks, including ISO 27001, ISO 9001, SOC 1, SOC 2 Type II, and IRAP.

• Demonstrated experience managing compliance audit programs, coordinating with external auditors, overseeing evidence collection, and tracking findings through to remediation.

• Experience reviewing and negotiating information security clauses in customer contracts, partnering with Legal to manage non-standard or exceptional commitments.

• Familiarity with regulatory, privacy, and data protection requirements across APAC, the Middle East, Africa, and/or Japan.

• Experience using GRC platforms or risk management tools, such as Protecht or equivalent, to manage audit evidence, corrective actions, risks, and findings.

• Strong stakeholder management, communication, and influencing skills, with the ability to manage customer escalations, produce executive-ready reporting, lead initiatives, and work independently while continuously adapting and learning.

Additional preferred qualifications include:

• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer / Lead Auditor, or CISA.

• Experience with cloud environments such as AWS, Azure, or Google Cloud Platform.

• Knowledge of privacy and data protection regulations relevant to the AEM region (e.g., PDPA, PIPL, POPIA, UAE PDPL, or equivalent).

• Experience working in or supporting highly regulated industries such as financial services, legal, or media.

• Familiarity with AI governance and responsible AI risk frameworks.

#LI-LK1

What’s in it For You?

About Us

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.

We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.

We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. More information on requesting an accommodation here.

Learn more on how to protect yourself from fraudulent job postings here.

More information about Thomson Reuters can be found on thomsonreuters.com.