Risk and Control Advisor

**The Role**:
Please note that this role will be on SBO Terms and Conditions.
Risk & Control Advisor Solution Centre
The IRM Solution Centre is principally a new team and its objective is to enhance the overall IRM user-experience, presenting IRM as a business enabler by providing relevant advisory and directions related to managing Information Risk. The IRM Solution Centre is an evolution from the current IRM Front Office, bringing diversity of interfaces and touch points together in a single IRM Solution Centre function, while considering automation of support functions with PowerBI (reporting), RPA and Chatbots to optimize speed, quality and operational costs.
Where you fit in
The Global Functions IT and IRM Purpose is to enable Shell to beat the competition through delivering against the IT Strategy, with targeted secure digitalisation goals for our Functions, while keeping our People at the heart of it all through genuine Employee Engagement
Shell Global Functions are going through a transformation, and we as IT for Global Functions are undergoing a similar exercise in the Function at a pace set by the Business to ensure that we are aligned with our stakeholders’ expectations and deliver the most value. Our purpose is to be the world class IT partner of choice with the vision of enabling Digitalisation and Competitive advantage across the functions in a secure fashion.
Faster delivery of IT services will be key as the pace of Technology change increase, which also creates additional risks and challenges, where managing the Information Security Threats to IT and the Business are critical. Risk engagement is more than ever required with the Business, staff need to be more aware and educated on the threats, we need to be able to create a culture of thinking securely, we need effective controls and assurance for new technologies and existing technologies.
The Risk and Control Advisor Solution Centre requires understanding of business and internal needs and drive best practices through market standards ensuring appropriate risks are identified and supported. The role would need to collaborate with various teams within IRM and outside to ensure we provide appropriate advise and support to our stakeholders.
The team is accountability for consolidated (PowerBI) reporting and being the one-stop shop for all IRM related request or queries.

Being part of larger Risk Advisory team, the role also requires driving initiatives that improves the overall speed, quality and efficiency towards Risk management policies and processes and develop the team for the future with better LOD 2 capabilities in Risk Advisory with relevant LOD1 activities embedded mostly with IT Engineering and ITSO.
The Role
The accountabilities of the role include:

- Understands IRM and IT Services/Platforms to drive Integrated Risk Assessments.
- Be a “trusted advisor” providing risk advisory on IT risks, Findings, new technologies or other business requests.
- Ensure risks are documented, classified and addressed with appropriate action as per the IRM standards.
- Support in development of tooling to support IRM processes and ensuring this is fit for purpose.
- Active participation in driving awareness of Information security related issues and risks with Business/Business IT Teams.
- Own IRM’s risk reporting provided mostly via Power BI

Below is the dimension of the role:

- Demonstrate understanding of risk management skills.
- Influence on the deployment of majority of new technologies and key platforms, essential to develop the future of Shell’s IT landscape in a secure and reliable manner.
- Interfaces with wide set of stakeholders in IT: Portfolio Managers, ITM, Business IRM, SOM, IT Engineering - S&C and internal IRM teams.

What we need from You
Key Hard Skills Required:

- At minimum 5+ years in IRM or security functions, preferably aligned with control framework best practices and risk management.
- Demonstrated understanding of, and experience with Information Risk Management, IRM processes, the IRM portfolio, the Business (IT) Controls Framework and project delivery.
- Good understanding of internal and external IT security standards, and relevant legal compliance aspects.
- The ability to balance IRM needs and standards considering risk and affordability to the Business as well as business impact.
- Skilled at working effectively with cross functional teams in a matrix organization.
- PowerBI developer skills are preferred

Key Soft Skills Required:

- Customer first mindset, Excellent communication and influencing skills.
- Proven analytical and problem-solving skills.
- Be pro-active and self-motivated.
- Display Ability and eagerness to quickly learn new technologies.
**Translated Company Description
- Please note that this role will be on SBO Terms and Conditions.
**Disclaimer