Bachelor’s degree in computer science, information technology, IT/Cyber security, and/or risk management
A number of years of risk and control or internal audit experience inclusive of any direct Technology control/validation testing experience
Expertise in risks related to information technology, cyber security, IT General Controls (ITGCs), application controls, IT platforms and related technologies and data governance components
Strong working knowledge of IT risk frameworks (ITIL, COSO, COBIT, NIST, ISO, etc.) and Technology testing methodologies
Deep understanding of other assurance-based activities including Technology controls
Responsibilities
Demonstrate excellent communication and leadership to influence a wide range of stakeholders
Demonstrate strong initiative, project management, people skills, sound decision-making, intuitive thinking, and sensitivity to cultural diversity
Display strong presentation and influence skills
Establish and develop strong working relationships with key stakeholders
Accurately design and execute the quality control/validation approach and ensure that quality control/validation documentation is clear, concise, supports the reviews performed, and explains decisions made
Identify and analyze risks, plan and prioritize validation tasks for on-time delivery, conduct interviews, observe operations, document and analyze processes and controls
Exercise responsibility over the execution of assigned regulatory validation projects and/or deliverables to ensure that work is performed promptly and accurately
Develop and show an understanding of the business risks, controls, and processes, along with an understanding of relevant laws, regulatory rules and knowledge of the impact of systems within areas reviewed
Escalate and/or communicate with relevant stakeholders to discuss the issues raised during the quality control/validation activities and agree path forward for resolution