Company Description

Vantage provides natural solutions to our customers’ technical performance and marketing needs through a unique combination of chemistry, application expertise and service. Underpinned by our broad portfolio of formulations, ingredients and actives that are built on a backbone of sustainable oils, fats and their derivatives, Vantage targets selected markets and applications including personal care, food, surface treatment, agriculture, pharma, and consumer and industrial performance. Vantage is headquartered in Deerfield, IL., operates in 11 countries worldwide and employs more than 1,000 talented professionals focused on delivering exceptional customer experiences with every interaction. We are a dynamic people-centered organization where you’ll be part of a collaborative integral team. Embracing our cultural diversity, we learn from each other to constantly improve, adapt and iterate. We value the voices and talents of our colleagues, empowering them to drive their unique ideas to completion. We’re convinced that exceptionally motivated employees produce outstanding results, and we celebrate them by fostering a culture of recognition, development, learning, excellence and shared achievement. Most importantly, we know you’re going to like it here.

For more information visit: vantagegrp.com or LinkedIn/vantage.

The IT Governance, Risk, Compliance & Change Lead is responsible for establishing and managing the governance structure, policies, controls, audit readiness, and change management processes for the IT organization. This role serves as the central owner for IT policy management, internal and external audit coordination, IT risk tracking, compliance documentation, and enterprise change management governance. This position partners closely with IT Operations, Cybersecurity, Applications, Infrastructure, Quality, Regulatory, Legal, Internal Audit, Finance, and site leadership to ensure IT processes are controlled, documented, auditable, and aligned with business and regulatory expectations.

The ideal candidate is a hands-on governance leader who can write clear policies, manage audit evidence, coordinate cross-functional stakeholders, run an effective change management process, and bring structure to a complex IT environment.

Essential Duties and Responsibilities

IT Governance & Policy Management:

- Develop, maintain, and continuously improve IT policies, standards, procedures, and work instructions.
- Establish a structured policy lifecycle, including ownership, review cadence, approval workflow, version control, publication, and employee acknowledgment where required.
- Translate technical IT practices into clear, practical, business-readable documentation.
- Maintain a centralized IT governance repository for policies, procedures, control documentation, audit evidence, risk registers, and compliance artifacts.
- Partner with IT leaders to define and document core governance processes, including access management, change management, incident management, problem management, vendor access, disaster recovery, backup management, data retention, acceptable use, system ownership, and IT asset governance.
- Ensure IT policies and procedures remain aligned with business requirements, regulatory expectations, cybersecurity standards, and audit findings.

IT Risk & Control Management:

- Maintain and manage the IT risk register, including risk identification, impact assessment, ownership, mitigation plans, target dates, and status reporting.
- Coordinate with IT, Cybersecurity, Applications, Infrastructure, and business stakeholders to identify control gaps and process weaknesses.
- Track remediation actions for audit findings, risk items, exceptions, and control deficiencies through closure.




- Support development and maintenance of IT control narratives, control matrices, process flows, and evidence requirements.
- Assist with recurring IT control activities, including access reviews, privileged access reviews, change control reviews, vendor access reviews, backup verification, disaster recovery documentation, and system ownership validation.
- Prepare governance and risk reporting for IT leadership, internal audit, executive leadership, and other stakeholders.

Compliance & Audit Readiness:

- Coordinate IT responses for internal audits, external audits, customer audits, supplier assessments, cybersecurity questionnaires, and site-level compliance requests.
- Support IT-related portions of OSHA, ISO, FDA, quality, customer, and regulatory audits.
- Organize, review, and maintain audit evidence related to IT general controls, system access, change management, cybersecurity, data integrity, backup and recovery, disaster recovery, system validation, incident response, and vendor management.
- Partner with Quality, Regulatory, Operations, Legal, and site leadership to ensure IT audit responses are accurate, timely, and consistent.
- Develop reusable audit response templates, evidence packages, control descriptions, and standard responses for recurring customer or regulatory requests.
- Manage audit calendars, deadlines, evidence requests, stakeholder follow-ups, remediation tracking, and audit closure documentation.
- Help shift IT from reactive audit response to continuous audit readiness.

Change Management Governance:

- Own and administer the IT change management process, including change policy, procedure, workflow, approval structure, risk classification, documentation standards, and compliance reporting.
- Coordinate the Change Advisory Board process, including agenda preparation, change review facilitation, emergency change review, action item tracking, and follow-up on incomplete or non-compliant changes.
- Partner with Infrastructure, Applications, Cybersecurity, Data, ERP, and business system owners to ensure changes are properly assessed, approved, tested, communicated, implemented, and closed.
- Maintain change management standards for implementation plans, rollback plans, test evidence, business approvals, technical approvals, impact assessments, and post-implementation reviews.
- Monitor change compliance, including unauthorized changes, failed changes, emergency changes, overdue approvals, missing evidence, incomplete testing, and changes closed without proper documentation.
- Develop and maintain change management metrics and dashboards, including change volume, success rate, failure rate, emergency change rate, approval SLA adherence, aging, and recurring control gaps.
- Drive continuous improvement of the change process, including standard change models, approval routing, ServiceNow configuration recommendations, CAB operating cadence, and reporting improvements.
- Ensure change management evidence is available and complete for internal, external, customer, ISO, FDA, and regulatory audits.

Cross-Functional Coordination:

- Serve as the central coordination point between IT and functions such as Quality, Regulatory, Legal, HR, Finance, Operations, Procurement, Commercial, and Internal Audit.
- Work with system owners across ERP, CRM, HRIS, quality systems, manufacturing systems, infrastructure,



cybersecurity, data platforms, and SaaS applications.
- Follow up with stakeholders to ensure audit evidence, control activities, policy approvals, change records, and remediation tasks are completed on time.
- Support communication and training efforts related to IT policies, audit expectations, change management, compliance requirements, and governance processes.
- Help establish a culture of accountability, documentation discipline, controlled change, and audit readiness across IT.

Education & Experience Education: Bachelor’s degree in Information Systems, Business, Risk Management, Cybersecurity, Quality, Compliance, or related field preferred.

Experience:

- 10 or more years of experience in IT governance, risk, compliance, audit, IT operations, change management, cybersecurity, quality systems, or a related field.
- Experience managing or coordinating IT audits, control evidence, policy documentation, change management, or compliance programs.
- Experience with IT general controls, access management, change management, incident management, disaster recovery, backup controls, vendor access, and system ownership.
- Experience working in a regulated, manufacturing, chemical, pharmaceutical, food, life sciences, or quality-driven environment preferred.
- Familiarity with frameworks or standards such as ISO, FDA, SOX, SOC, NIST, CIS, ITIL, COBIT, or similar control frameworks.
- Experience with ITSM or GRC tools such as ServiceNow, SharePoint, Microsoft 365, Azure Devops, Power BI, Jira, or similar platforms preferred.
- Experience supporting FDA-regulated, ISO-certified, or customer-audited environments.
- Experience supporting ITGCs, data integrity controls, computer system validation, system access controls, and change control.
- Experience coordinating customer audits, supplier cybersecurity questionnaires, or regulatory audit requests.
- Experience building IT risk registers, audit trackers, policy repositories, control matrices, and compliance dashboards.
- Experience with ServiceNow change management, incident management, problem management, CMDB, knowledge management, or workflow configuration.
- Experience developing standard change templates, CAB processes, change metrics, and audit-ready change reporting. Familiarity with ERP, CRM, HRIS, quality, manufacturing, laboratory, cybersecurity, infrastructure, and cloud systems.

Knowledge, Skills, & Talents

- C1 english level (written, reading and speaking).
- Strong policy, procedure, and process documentation skills.
- Strong understanding of IT governance, risk management, audit readiness, and control evidence.
- Practical understanding of IT change management and IT service management processes.
- Ability to coordinate multiple stakeholders across technical and non-technical teams.
- Strong follow-up discipline and ability to drive tasks to closure without direct authority.
- Excellent written and verbal communication skills.
- Ability to translate technical details into clear business and audit language.
- Strong attention to detail and ability to identify gaps, inconsistencies, and incomplete documentation.
- Ability to manage multiple audit requests, change reviews, policy updates, and remediation items at the same time.
- Comfortable operating in a complex, multi-system, multi-site environment.

Equal Employment Opportunity Vantage is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or any other protected category.

Additional Information

All your information will be kept confidential according to EEO guidelines.

📌 IT Governance, Risk, Compliance, & Change Lead (Bogotá)
🏢 VantageSpecialtyChemicals
📍 Bogotá