A market infrastructure institution needed one person to own IT governance, risk and compliance. Here's how we hit the mark.
Regulatory scrutiny was increasing, and technical operations and regulatory mandate needed to move as one. The institution needed audit readiness and risk mitigation held by one accountable person.
A product-led technology company in scientific communication and research enablement was scaling its portfolio and needed a senior engineering leader to hold technical governance across several platforms.
An industrial automation and heavy engineering organisation was expanding its automation capability and needed a divisional manager to lead complex, robotics-led programmes.
A private bank needed to strengthen its security operations centre against a rising volume of sophisticated financial threats, with real-time threat detection and incident response.
A polymer textile manufacturer moving into the artificial leather market needed technical expertise beyond its own bench, covering equipment, formulation and plant setup.
Fill in the form and our team will get back to you within 24 hours.
The mandate had a defined end: bring IT governance, risk and compliance up to audit standard and leave a framework in place. A market infrastructure institution facing increased regulatory scrutiny needed the capability at once and for a bounded period. A fractional engagement bought the days the work required. Marquee held the contract for the term, so the institution added capability while keeping permanent headcount unchanged.
Marquee searched inside the financial markets ecosystem rather than the general IT talent pool. The brief called for ISO 27001 and NIST frameworks alongside IT audit management in a regulated environment, an overlap that is narrow by design. Candidates were vetted at mid level with a proven record across those standards. Screening covered technical IT knowledge and regulatory reporting expertise together, because the audit asks for both in the same person.
Four evaluated candidates reached the shortlist. Marquee ran a targeted search within the financial markets ecosystem and managed the process end to end, including the institution's background verification and compliance requirements. Each candidate combined technical IT knowledge with regulatory reporting expertise. The institution interviewed against its own process, and Marquee stayed with both sides through to the start date.
The institution reached audit-ready status two months ahead of its annual technical audit. In practice that meant documentation standardised across departments, evidence collection made repeatable, and an IT risk register that categorises threats and automates follow-ups for remediation. A centralised GRC dashboard tracks compliance across all departments in real time. Audit lead time fell by about 30 percent through modernised documentation and proactive risk tracking.
Yes. Marquee runs permanent and fractional mandates through the same evaluation. What changes is how long the person stays and where the contract sits. A permanent version of this mandate would follow the same sequence: brief, targeted search inside the relevant ecosystem, assessment on technical and regulatory competence, then reference validation and onboarding. The institution chose fractional because the work had a defined end.