Technology Controls Assessment Role - Advisory Solutions Firm

Timings: 2:30 PM to 10:30 PM

Job Description:

Roles & Responsibilities:

Principal Duties/Responsibilities:-

Business As Usual (100%)

- Perform technology controls assurance service to include

- Review of control design

- Testing of control effectiveness

- Advice and guidance to control owners and project teams

- Establishing and operating processes and procedures to manage workload

- Co-ordinating and delivering assurance services

- Reporting and tracking technology control gaps as well as ineffective or inadequate technology controls

- Coordination and tracking remediation activities being performed by technology control owners

- Producing regular MI reports to the Management

- Taking initiatives and contributing to improvement of the Global IT risk and assurance activities

- Identify opportunities and recommendation to improve the design and implementation of technology controls

- Support technology control owners in the design and maintenance of controls and documentation

- Undertaking such other tasks and responsibilities as assigned by Manager

- Keep yourself up-to date with latest IS related regulation and standards

Communications and Relationships

Internal:

- Other members of IS & IT Risk teams

- IT Control Owners and teams

- Service Owners and Service Managers

- Other IT teams

- Project managers and teams

Competencies

- Global Business Knowledge

- Cross-Cultural Resourcefulness

- Cross-Cultural Agility

- Assignment Hardiness

- Cross-Cultural Sensitivity

- Humility

- Conflict Management

- Organizational Agility

- Customer Focus

- Integrity and Trust

- Personal Learning

- Self-Starter

- Problem Solving

Skills

- Strong IT and analytical skills

- Proactive rather than reactive

- Team player with good interpersonal skills

- Ability to work under pressure to tight timelines

- Organized and methodical

- Willing to challenge and desire to learn

- Good communication skills, both orally and in writing

- People management

Knowledge/Experience:

Essential:-

- Knowledge and understanding of IT general controls and IT concepts

- Experience of working in an team lead role, with an ability to plan, manage staff, interpret data, and prepare reports

- Experience working as part of a business support function such as risk, compliance or information security in a large enterprise.

Beneficial:-

- Existing IT risk, IT Controls or IT Audit experience of Around 3-5 years

- IT security, service delivery, systems development or similar experience

- Demonstrable knowledge of risk management tools, methodologies and practices

- Knowledge of IT standards, frameworks, regulation and legislation

- Experience of managing own workload and delivering to tight timescales.

- Other relevant experience, e.g. Information Security, experience of working in a regulated environment, not necessarily insurance or financial services

Requirements:

- Qualified to degree level, preferably in a business, IT or security related subject

- Be interested in developing skills and knowledge of IT Risk Management, and willing to work towards appropriate professional qualifications, such as CISA

- Formal training in security, risk management or compliance is beneficial.

- Whilst this is not a hands-on technical role, the role holder will be expected to demonstrate a strong awareness of technology and how IT is used to enable business processes.

- Expertise in Information Security, knowledge of Technology Controls, IT Risk Assessment, IT Audits, SOX Audits.