- Conduct and support Risk and Control Self-Assessments (RCSA), assisting in identifying emerging risks and changes required to key controls based on changing business requirements.
- Provide expertise to support the first-line risk owners in the development and ongoing enhancement of appropriate Key Risk Indicators (KRIs) and metrics to ensure alignment and embedment of our client’s risk appetite framework.
- Deliver risk activities to monitor and assess risk on an ongoing basis in support of the IT GRC Framework, ensuring the processes and controls in place mitigate risk and comply with applicable legislation and regulations.
- 1 to 3 years of experience delivering risk management activities across IT, Data, & Cyber risk within an internal GRC function.
- Experience working within a regulated environment (finance, banking, insurance, energy, public sector) is a must-have.
- Previous demonstrable experience of designing and implementing IT, Cyber and/or Data Controls which appropriately mitigate the associated risk. IT Controls assurance testing experience desirable, not essential.
- Strong communication skills required to help outline complex IT, Data & Cyber risk concepts clearly and persuasively to both technical and non-technical stakeholders is essential.
- An IT GRC qualification supporting risk management, such as CRISC, CISM, and CISA, is essential.