It Controller Security Specialist

Overview
IT controller reports to the Senior Service Delivery Manager and is responsible for monitoring the compliance of IT controls, processes and governance within the Product & Technology Function.
They follow security and risk frameworks to ensure all controls satisfy regulatory requirements.
They drive the Risk, Compliance, Audit and Regulatory programmes within the Product, Technology and Security Function at a global level.
Responsibilities
Manage the IT Controllership function including areas and tasks as outlined below:
Responsible for ongoing development and continuous improvement of the control framework, including supporting the team in the review and creation of policies, processes and procedures to comply with company requirements
Verify the Controllership and Operations calendar, ensuring it is up to date and reviewed regularly
Document processes and roadmap for running the Controllership function
Communicate any upcoming activities to relevant stakeholders in a timely manner
Execute IT Controllership controls and establish operating rhythm with Management for monthly reporting
Oversee the artefact management: review and manage key governance artefacts to ensure compliance and oversight; ensure artefacts are correctly stored within the designated Product & Technology repository; maintain accessibility of relevant information for the right stakeholders at the right time; identify and rectify any missing or misfiled artefacts to support regulatory compliance and enhance governance
Oversee all IT and Security audit engagements; act as the primary mediator between the Product and Technology teams and Internal Audit during audit engagements; facilitate collection of relevant documentation, coordinate with key stakeholders for fieldwork, and ensure effective tracking and resolution of audit findings; monitor the resolution of audit findings across outsourced service providers and internally and ensure they are documented accordingly; establish action tracking and deliver reporting monthly; verify that optimum controls are in place and operating effectively; conduct formal monitoring to ensure Product and Technology controls are being met, document results and ensure remediation and training where necessary
Ensure adequate oversight of Incident, Problem and Change as part of reporting metrics and continual service improvement in line with controls
Manage the engagement with the Risk Function as SPOC; support the completion of annual risk assessments; act as SME on risk work completing first pass on RCSA / RAS / KRI/s / Process & Risk Taxonomies; chair and manage the monthly ICT Risk Register meetings; ensure actions and approvals are managed to timelines and shared to Risk Function
Keep up to date on delivery of all new technology and functionality, ensure relevant controls are updated and adhered to
Ensure documentation meets required industry and corporate standards and supervise and support the Policy Review cadence in the company
Manage the preparation of the Board and Board Committee materials and ensure that items are submitted within the relevant deadlines
Manage the third party vendors in the procurement tool to ensure: contracts are validated; PO's and Invoices are processed in a timely manner; approvals are received from relevant stakeholders
DORA: Oversee remediation activities and ensure IT controls are updated accordingly
Learning: Ability to assign time to ensure latest regulatory updates are assessed, understood and communicated to P&T team; action plans created as necessary
Provide a formal monthly reporting mechanism to management on the status of all activities
IT Controls Oversight
Risk SPOC and SME for Product and Technology
Compliance SPOC and SME for Product and Technology
Audit Engagement and management
Formal monitoring of Product and Technology controls
Vendor Invoice and Contract Management
Regulatory Projects - including DORA and PSD3
Policy management
Management of Board and Board Committee updates
Knowledge and Skills
Oversight on External and Internal Audit programmes
5 years experience in similar role
Oversight of IT Controls - Multi tasking
Experience in regulated industry
Risk experience as SME
Seniority level
Mid-Senior level
Employment type
Contract
Job function
Finance and Sales
Industries
Staffing and Recruiting
Call Lindsay O'Leary for further spec details.
#J-18808-Ljbffr