- Develop and implement robust IT risk management frameworks to identify, assess, and mitigate cyber and operational risks.
- Conduct comprehensive risk assessments and control testing for critical IT systems and applications, ensuring compliance with policies and regulations.
- Design, implement, and maintain effective IT control environments, including access management, change control, and incident response.
- Translate complex regulatory requirements (e.g., GDPR, SOX, PCI DSS) into actionable IT control objectives and procedures.
Desired Candidate Profile
Minimum 7 years in IT risk, controls, audit or assurance, including banking or regulated financial-services experience.
Independently review first-line remediation evidence for completeness, correctness and traceability.
Assess policies, procedures, control designs, operating evidence, approvals and closure packs.
Maintain assurance plans, evidence requests, workpapers, findings and closure recommendations.
Track gaps, overdue evidence, actions, dependencies and risks.
Perform sample-based testing and walkthroughs.
Quality-assure management reporting and submission packs.
Coordinate with IT GRC, programme management, Internal Audit, Compliance and Technology.
Document conclusions, limitations and residual risks.
IT risk, control testing, audit or assurance.
Technology governance, cybersecurity, resilience, service management and third-party controls.
Evidence assessment across design, implementation and operating effectiveness.
Regulatory remediation and audit closure.
Strong analysis, writing, challenge and stakeholder management.
Excel, PowerPoint, JIRA, Confluence and GRC repositories.
Certifications
CISA, CRISC, CGEIT, CISSP, ISO 27001 Lead Auditor or ITIL 4 Foundation preferred.