IT Risk & Control Specialist

• Leading and promoting a solid culture of risk awareness and management across the function.

• Develop, recommend, implement control measures to maintain risk management practices in technology for financial services while keeping up to date with industry best standards.

• Prepare reports for executive management, Board and regulatory bodies as needed.

• Provide thought-leadership as the Risk and Controls specialist for all cloud and on-premise technology.

• Ensure controls are effective, efficient, and aligned with best practices, regulatory and company requirements.

• Leading by example, fosters a culture of control which balances risk reduction through control effectiveness against the needs of the business and its customers.

We are seeking highly motivated and experienced Line 1 IT Risk & Control Specialist for CIO.

The ideal candidate will have a proven track record of success in managing IT risks and controls, leading teams, and driving continuous improvement. This role requires an extensive background within IT Risk and Controls management, excellent leadership skills, and a passion for delivering outstanding customer service., * In-depth knowledge and experience of operating at a senior level in risk management with a demonstratable understanding of current regulatory and IT Risk & Control Management.

• Excellent communication skills with stakeholders at all levels of the organisation, including technical and non-technical teams.

• Proven ability to balance risk management with commercial considerations when defining Risk Appetite, and the skill to influence and negotiate with stakeholders on risk acceptance decisions.

• Extensive Experience working in regulated industries and Tier 1 Banks, in particular leveraging technology standards, frameworks, compliance, and industry recognised best practice / standards.

• Proven experience managing relationships with internal and external auditors, business and technology stakeholders and leading large-scale assessment programmes.

• Experience with GRC tools and data analytics to enhance efficiency and insight.

• Strong understanding of IT risk and control frameworks

• Experience with cloud and on-premises technology environments

• Ability to interpret and apply regulatory requirements to IT environments

• Experience with audit processes and risk assessments

• Knowledge of cyber security principles and best practices

• Professional certifications such as Certified Risk Management Professional (CRMP), Certified Internal Auditor (CIA), or similar are advantageous.

• Bachelor's degree in computer science, Information Security, Information Technology, or a related field

• Master's degree in a relevant discipline

• Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Risk Management Professional (CRMP), or Certified Internal Auditor (CIA) Skills

• IT Compliance

• Risk

• Cybercrime