Governance Assurance Specialist

This role focuses on assurance activities over resiliency material and critical controls testing, with potential to move into other operational risk domains.

The Governance Assurance Specialist will support the development of testing methodology for key controls across global business. This role will be responsible for developing and executing controls testing plans, communicating, agreeing upon, and monitoring gaps in controls in line with risk management processes. This will be done in collaboration with other assurance functions across the first, second, and third lines of defense (LOD).

The specialist will also support the Controls Testing Manager in the development of testing methodologies, the risk universe, and integrated reporting.

Key Responsibilities:

• Support the Controls Testing Manager in identifying and prioritizing testing activities as part of the assurance planning process.
• Plan and execute control tests, including coordinating review process with key stakeholders, managing activities of control testing analysts, reviewing quality of work performed, and ensuring alignment with assurance testing methodology.
• Prepare draft reports reflecting results of work performed and advise business on appropriate solutions and remediation activities, engaging 2LOD and subject matter experts in agreeing action plans.
• Presents results to senior management to get buy-in and agreement to action.
• Coordinates activities throughout review lifecycle with senior stakeholders.
• Collaborates with Data Analytics team to identify opportunities for converting manual testing into analytics-based testing and continuous assurance activity.
• Supports 1LOD with issues remediation and validation of evidence before issue closure.
• Provides feedback to design and implementation teams on any learnings identified as part of control testing.

Required Skills and Qualifications:

• Demonstrates high levels of personal integrity at all times.
• Strong oral and written communication skills.
• Influencing skills and gravitas, so that senior management will buy-in to changes being proposed.
• Ability to work independently and proactively.
• Commercial and pragmatic approach to governance and change.
• Problem solver who proposes innovative solutions.
• Approach that champions collaboration and consultation.
• Experience in scoping, executing, and reporting access management control testing.
• Proven ability to identify key risks in access management and influence improvements in the control environment.
• Adept at queries, report writing, and presenting findings.
• Experience of working in a global environment.

Qualifications:

• Education to degree level.
• 4+ years' experience in information security controls assurance or IT audit (Big 4' and/or internal audit experience desirable).
• Understanding of IT systems and operation.
• Experienced performing controls testing.
• Experience of data analytics or continuous monitoring.
• Experience in working in a multinational environment.
• Proactive, self-motivated, and resilient working in a fast-paced global functional team.
• Strong communication and presentation skills, including excellent written and spoken English.
• Broad knowledge of compliance regulation, controls, and in-depth understanding of risks, assessment methodologies, and assurance activities.
• Skilled at stakeholder management with ability to work closely with multiple internal stakeholders at varying levels within the organization.