IT Risk & Control Analyst

Role Description:

This position will require you to have a detail oriented approach for the processes and associated controls under your scope but also have a strong big picture focus to understand wider impacts across the business as a whole.

• Support the business stakeholders to understand IT risks, including regulatory compliance risks (e.g., Cloud Security, SOx, GDPR etc.),
• Support respective business teams to develop and improve IT controls in complex IT environments
• Responsible for facilitating SOx activities such as process walkthroughs, documentation of process narratives and Risk & Control Matrices (RACMs) and supporting the business in addressing audit requests (internal audit and external auditors)
• Responsible for facilitating identification, assessment and management of issues impacting the control environments of these departments
• Responsible for uploading and maintaining risks, controls and issues in our GRC platform (ServiceNow)
• Partner with other Risk Analysts and Officers for ensuring that business and IT process linkages are well understood and controls are adequately designed and documented.

• Previous work experience across one (ideally two) or more of these areas Risk Management, IT Audit, Financial Audit, and/or Internal Controls
• Strong working knowledge of risk management and ITGCs with the experience in applying them in complex IT environments
• Working knowledge / experience with SOx audits and auditor testing methodology
• Flexibility to adapt to an ever-evolving and dynamic work environment
• Strong communication and relationship building skills
• Able to self-motivate, organize and take responsibility for own workload to ensure that deadlines and objectives are met
• Able to multitask and prioritize work effectively
• Strong communication skills. Fully comfortable working in English, both written and spoken.

The following are preferred qualifications for the position:

• Familiarity with specific technology (AWS, Snowflake, Big Data Lakes/Platforms) is preferred
• Familiarity with financial audits is preferred
• Familiar with applicable IT frameworks (COBIT, ITIL, NIST, ISO 27001, 20000, 22301, etc) is a plus

-