> Markdown version of [/jobs/ext/18855-it-risk-control-specialist](https://www.wearedevelopers.com/jobs/ext/18855-it-risk-control-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT risk & control specialist - **Company:** Another Star - **Location:** Leiden, Netherlands (Remote available) - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Technology Audit, Play Framework, IT General Controls (ITGC), Information Technology - **Published:** May 13, 2026 - **Apply:** https://nl.indeed.com/viewjob?jk=d748dc843f5ef29c ## About the Role Do you have experience in Play Framework?, Do you have a Master's degree?, * Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, Finance, Auditing, Business Administration or a related field. * Prior experience within the IT or IT Audit domain. * Solid analytical skills with the ability to assess IT risks and propose effective solutions. * Excellent communication and interpersonal skills, with fluency in English. * Proactive mindset with a keen eye for detail and the ability to challenge the status quo. * Upholds the highest ethical standards in all aspects of work. * Experience in the hospitality industry is advantageous. * Knowledge of IT frameworks such as COBIT, ITIL, ISO 27001 is a plus. And industry certifications such as CISA, CRISC, ISO 31000 Risk Manager etc. would be beneficial. ## Description As an IT Risk & Control Specialist, you will play a crucial role in strengthening our IT risk management framework and internal control processes related to information technology. Your primary responsibility is to identify, assess, and drive mitigation of potential IT risks in our systems and processes. You will collaborate closely with various stakeholders, including IT, to promote IT risk awareness and implement effective strategies, reporting to the Global Head Risk & Control., * Develop, refine, and implement the IT internal control framework under the guidance of the Global Head Risk & Control. * Maintain a centralized repository of key IT controls and monitor their quality to ensure adherence to IT risk management and internal control standards. * Collaborate with relevant stakeholders to ensure timely and effective implementation of IT control recommendations and enhancements. * Identify and drive opportunities for IT control enhancement through automation and continuous control monitoring. * Provide expert advice to the organization on the remediation of IT control issues, offering proactive solutions to mitigate IT risks. * Organize regular awareness sessions on IT internal control framework (ITCG) to enhance understanding and adoption across the organization. * Driving the Change management process within the organization, this includes training (together with L&D), CAB board ownership, lead CAB board meetings and Change Management governance. * Assist in preparing comprehensive reports on IT risk and control matters for (senior) management and stakeholders, highlighting key insights and recommendations. * Contribute in the development, maintenance, and testing of the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) for IT systems. * Provide support in designing, implementing, and maintaining user access controls for IT systems, ensuring alignment with security policies and compliance requirements. * Support in designing and maintaining role matrices for IT systems to ensure appropriate access levels and segregation of duties. ## Related Videos - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Developing ASP.NET Core Microservices with Dapr: A practical guide](https://www.wearedevelopers.com/videos/1528-developing-asp-net-core-microservices-with-dapr-a-practical-guide) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [The Future of Recruiting: Innovations and Challenges in the European IT Sector](https://www.wearedevelopers.com/videos/1056-the-future-of-recruiting-innovations-and-challenges-in-the-european-it-sector) - [The LLM Evolution: From Sequence Imitation to Verifiable Reasoning](https://www.wearedevelopers.com/videos/100343-the-llm-evolution-from-sequence-imitation-to-verifiable-reasoning) ## Related Articles - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)