10+ years of risk and control experience inclusive of direct control testing experience
Experience managing teams across multiple jurisdictions
Bachelor’s degree in computer science, information technology, IT/Cyber security, and/or risk management
Current working knowledge of risks related to information technology, cyber security, IT General Controls (ITGCs), application controls, IT platforms and related technologies
Strong understanding of IT risk frameworks (ITIL, COSO, COBIT, NIST, ISO, etc) and Technology testing methodologies
Understanding of assurance-based activities including Technology controls monitoring and compliance testing
Professional certifications a plus (e.g., CISA, CRISC, CISM, CISSP)
Responsibilities
Leads and tests controls including walkthroughs, design, and operating effectiveness testing
Ensures all aspects of testing are properly documented in prescribed templates and First Line of Defense Control Testing Methodology and in line with testing quality expectations
Assist with drafting reporting and incorporate feedback resulting from Test Lead/Manager review
Responsible for identification and escalation of follow-ups and potential deficiencies
Work closely with stakeholders of varying levels to remediate risk areas while driving improved operations/compliance
Assist with control projects, operational and/or corporate risk initiatives, where directed