IT Risk and Control Specialist

Project description

Join us in a stimulating and rewarding position with our esteemed investment banking client. As an expert in IT Risk and Control, your experience will greatly enhance our skilled team of assessors. Your leadership will ensure the success of our assessors' team by providing top-tier expertise and supervising critical outcomes, playing a leading role in our assessment team.

Responsibilities

• - act as a risk and control subject-matter expert for Organization Technology and operational processes, supporting the organization in all areas of IT risk management, and with a special forte in cloud-related risks and information protection - ensure risk frameworks are operating effectively - identify and assess operational risks, issues, and associated action plans from all phases, from inception through completion - translate IT issues to business risk and effectively communicate them to senior management - assist in managing a progressive and sustainable control environment

SKILLS

Must have

• - Exceptional analytical and research capabilities, particularly in IT audits and risk control. - Significant experience in technology and IT risk management within the security services sector, especially at a senior level. - Comprehensive understanding of various risk and control frameworks and standards (like CSA CCM/STAR, SOC2, COSO, ISO standards), and IT industry best practices. - Strong problem-solving skills and a robust technology foundation. - Demonstrated ability to communicate effectively with senior management and external parties. - Mastery of operational risk management and its practical applications. - Resilient, adaptable, with excellent interpersonal skills. - A detail-oriented approach, capable of creating customised methodologies. - Skills in identifying, evaluating, and advising on control deficiencies and risks. - Experience in leading or managing major risk and control projects within tight deadlines. - Confidence in engaging with team members at all levels, across diverse locations.

Nice to have

- Risk or control certifications (like CRISC, CISSP) are a plus. - Certifications in ISO 27001, SOC2 Type2, and Lead Auditor are beneficial.