IT Risk & Controls Specialist

• Develop and implement robust IT risk management frameworks to identify, assess, and mitigate cyber and operational risks. • Conduct comprehensive risk assessments and control testing for critical IT systems and applications, ensuring compliance with policies and regulations. • Design, implement, and maintain effective IT control environments, including access management, change control, and incident response. • Translate complex regulatory requirements (e.g., GDPR, SOX, PCI DSS) into actionable IT control objectives and procedures. • Minimum 7 years in IT risk, controls, audit or assurance, including banking or regulated financial-services experience. • Independently review first-line remediation evidence for completeness, correctness and traceability. • Assess policies, procedures, control designs, operating evidence, approvals and closure packs. • Maintain assurance plans, evidence requests, workpapers, findings and closure recommendations. • Track gaps, overdue evidence, actions, dependencies and risks. • Perform sample-based testing and walkthroughs. • Quality-assure management reporting and submission packs. • Coordinate with IT GRC, programme management, Internal Audit, Compliance and Technology. • Document conclusions, limitations and residual risks. • IT risk, control testing, audit or assurance. • Technology governance, cybersecurity, resilience, service management and third-party controls. • Evidence assessment across design, implementation and operating effectiveness. • Regulatory remediation and audit closure. • Strong analysis, writing, challenge and stakeholder management. • Excel, PowerPoint, JIRA, Confluence and GRC repositories. Certifications • CISA, CRISC, CGEIT, CISSP, ISO 27001 Lead Auditor or ITIL 4 Foundation preferred.