Technology Consultant (Resilience, PAM & IAM)

Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness., This role will play a central part in enhancing controls related to:

• Operational Resilience
• Privileged Access Management (PAM)
• Identity & Access Management (IAM)

You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard., Control Assessment & Diagnosis

• Review underperforming controls to identify:
• Root causes
• Design deficiencies
• Operating effectiveness gaps
• Assess whether current control designs are fit for purpose and aligned with regulatory expectations

Remediation Planning & Execution

• Define structured remediation plans, including:
• Actions
• Ownership
• Milestones
• Evidence requirements
• Drive delivery of remediation activities in collaboration with control owners and SMEs

Stakeholder Engagement

• Partner with:
• Technology and engineering teams
• Risk & compliance functions
• Internal audit and assurance stakeholders
• Provide constructive challenge to ensure robust and sustainable control improvements

Control Framework Enhancement

• Support optimisation of control operating models, including:
• Control frequency
• Evidence standards
• Accountability models
• Governance processes
• Embed consistent control discipline across resilience, PAM, and IAM domains

Governance & Reporting

• Track remediation progress and proactively escalate:
• Risks
• Blockers
• Overdue actions
• Produce clear, concise reporting for:
• Senior stakeholders
• Governance forums
• Review remediation evidence to confirm completeness and sustainability

Audit & Assurance Readiness

• Support preparation for:
• Control testing
• Internal/external audit
• Regulatory reviews
• Ensure remediation outcomes are defensible and audit-ready, + Privileged account governance
• Joiner-Mover-Leaver processes
• Access recertification and reviews
• Exposure to:
• PAM tooling (e.g. vaulting solutions)
• Break-glass access
• Session monitoring
• Privileged account ownership models

Identity & Access Management (IAM)

• Experience with:
• Access provisioning & de-provisioning
• Role-based access controls (RBAC)
• Segregation of duties (SoD)
• Strong understanding of:
• Access reviews and governance
• IAM control testing
• Leaver controls

Do you have experience in Financial services?, * Proven experience in one or more of the following:

• Technology Risk / IT Controls
• Cyber Risk
• IT Audit
• Operational Resilience
• Strong track record delivering control remediation in:
• Financial services
• Banking
• Regulated environments
• Experience assessing:
• Control design effectiveness
• Operating effectiveness
• Familiarity with:
• Risk & Control Self-Assessments (RCSA)
• Audit findings and issue management
• Assurance and regulatory reviews
• Demonstrated ability to manage remediation lifecycle from identification through to closure

Operational Resilience

• Understanding of:
• Critical business services
• Disaster recovery & business continuity
• Technology recovery controls
• Experience with:
• Resilience testing evidence
• Impact tolerances
• Recovery plans & continuity procedures, * Strong analytical capability in control assessment and remediation design
• Ability to translate complex control issues into practical, actionable solutions
• Excellent stakeholder management across technical and non-technical audiences
• High-quality written communication, including senior-level reporting
• Confident in constructively challenging control owners
• Comfortable operating in ambiguous, fast-paced environments
• Strong attention to detail, particularly in reviewing remediation evidence