It Internal control lead

Function Specific Responsibilities Ÿ Conduct controls testing activities in areas such as Incident Management, Disaster Recovery, Management, Cryptography, Network Security and Identity & Access Manageme Ÿ Periodic review of new and existing controls from a design point of view Ÿ Evaluate and assess the effectiveness of IT & Cyber controls in remediating associated risks in an accurate, complete and transparent way Ÿ Be responsible for the testing progress for the assigned controls and update senior audiences about the progress and results Ÿ Understand and evaluate relevant IT & Cyber risks and controls designed to mitigate these risks to a level acceptable by IT management Ÿ Ensure the quality, integrity, and completeness of data related to clients and related parties in various independence systems of the firm. Support engagement teams in complying with independence policies. Ÿ Leading all the internal and External Audits for account Ÿ Lead Risk and Control assessment (RCA) for various accounts by performing Risk assessment, Controls design and Control assurance. Ÿ Analyzing information security impact while evaluating any change due to technology or business requirements. Ÿ Proactively investigate risk events including deep dives to identify issues arising. Ÿ Help ensure that the various elements of the risk management framework are embedded and operating efficiently across all accounts. Ÿ Maintain control master data for changes to underlying business processes, systems etc Ÿ Work with Control Owner for ineffective controls & coordinate action tracking Ÿ Maintain control master data for changes to underlying business processes, systems Ÿ Oversees attestation/certification processes Ÿ Local RACE/Tickit expert Ÿ Subject matter expert for risks, control objectives and controls specific to the function

  Customer Ÿ Use of customer insights to provide direction for business initiatives Ÿ Ensure best practice customer initiatives are adopted and applied Ÿ Provide exceptional customer service to internal and external customers within company guidelines, regulatory obligations and SLA's Ÿ Ensure all confidential information is handled in accordance with company and partner protocols and procedures Ÿ Ensure high levels of customer relationship management are maintained Communication Ÿ Ensure all contact and interactions are of the highest standards, communicating clearly and appropriately to all stakeholders Ÿ Collaborate and provide regular reporting and updates with key stakeholders across Ÿ Ensure all communication is in line with the delivery of our Brand Promise to all stakeholders What you'll bring Skills, qualifications & experience Ÿ CISSP, CISA, CISM, CRISC, CIPP, or similar industry certification(s) Ÿ Deep knowledge of industry standard regulations and risk management frameworks and standards (e.g., ISO, PCI, NIST, COBIT, GAPP, HIPAA, GDPR) Ÿ Experience with managing GRC products and implementations, including developing relevant business, technical, and data requirements Ÿ Experience in complex, matrixed environments and an experience navigating a constantly changing business Ÿ Strong communication with and organizational skills and an experience distilling complex risk data into impactful messaging to non-technical, leadership teams Ÿ Program and project management experience with process and organizational change implementation Ÿ Self-starter, experience working independently and as part of a team Ÿ Experience working independently and as part of a team Ÿ Strong analytical, research, and problem-solving skills with a keen attention to detail
Desired Candidate Profile Ÿ Minimum 10 years of experience in Information and Physical Security, Internal Audit, Data Privacy, or other Governance, Risk & Compliance Fields Ÿ Practical experience in implementing IT risk frameworks, controls, and methodologies Ÿ Experience discerning business relevant risk associated with technology control deficiencies Ÿ Experience in the areas of risks and controls across various IT platforms Ÿ Experience with interpreting and implementing data privacy and protection regulatory requirements at scale Ÿ Experience moving technical or business driven projects from inception to delivery, and experience articulating the impact using metrics

---