- Conduct and support Risk and Control Self-Assessments (RCSA), assisting in identifying emerging risks and changes required to key controls based on changing business requirements.
- Provide expertise to support the first-line risk owners in the development and ongoing enhancement of appropriate Key Risk Indicators (KRIs) and metrics to ensure alignment and embedment of our client’s risk appetite framework.
- Deliver risk activities to monitor and assess risk on an ongoing basis in support of the IT GRC Framework, ensuring the processes and controls in place mitigate risk and comply with applicable legislation and regulations.
- 3 to 5 years of experience delivering risk management activities across IT, Data, & Cyber risk within an internal GRC function.
- Experience working within a regulated environment (finance, banking, insurance, energy, public sector) is a must-have
- Strong technical understanding of a risk management control framework is a must-have.
- The ability to lead and adapt to changing business / technical landscape within a regulated environment is a must-have.
- An IT GRC qualification supporting risk management, such as CRISC, CISM, and CISA, is essential.