IT Controller Security Specialist

IT controller reports to the Senior Service Delivery Manager and is responsible for monitoring the compliance of IT controls, processes and governance within the Product & Technology Function. They follow security and risk frameworks to ensure all controls satisfy regulatory requirements. They drive the Risk, Compliance, Audit and Regulatory programmes within the Product, Technology and Security Function at a global level. Responsibilities: Manage the IT Controllership function including areas and tasks as outlined below:

● Responsible for ongoing development and continuous improvement of the control framework, including supporting the team in the review and creation of policies, processes and procedures to comply with company requirements ● Verify the Controllership and Operations calendar, ensuring it is up to date and reviewed regularly o Document processes and roadmap for running the Controllership function. o Communicate any upcoming activities to relevant stakeholders in a timely manner. o Execute IT Controllership controls and establish operating rhythm with Management for monthly reporting ● Oversee the artefact management o Review and manage key governance artefacts to ensure compliance and oversight. o Ensure artefacts are correctly stored within the designated Product & Technology repository. o Maintain accessibility of relevant information for the right stakeholders at the right time. o Identify and rectify any missing or misfiled artefacts to support regulatory compliance and enhance governance ● Oversee all IT and Security audit engagements. o Serve as the primary mediator between the Product and Technology teams and Internal Audit during audit engagements. Facilitate the collection of relevant documentation, coordinate with key stakeholders for fieldwork, and ensure effective tracking and resolution of audit findings. o Monitor the resolution of any audit findings across outsourced service providers and internally and ensure these are documented accordingly. o Establish action tracking and deliver reporting monthly o Verify that optimum controls are in place and operating effectively o Conduct formal monitoring to ensure that Product and Technology controls are being met, document results and ensure remediation and training where necessary. ● Ensure adequate oversight of Incident, Problem and Change as part of reporting metrics and continual service improvement in line with controls. ● Manage the engagement with the Risk Function as SPOC. o Support the completion of annual risk assessments Act as SME on risk work completing first pass on RCSA / RAS / KRI/s /Process & Risk Taxonomies o Chair and manage the monthly ICT Risk Register meetings Ensure actions and approvals are managed to timelines and shared to Risk Function. ● Keep up to date on delivery of all new technology and functionality, ensure relevant controls are updated and adhered to. ● Ensure documentation meets required industry and corporate standards and Supervise and support the Policy Review cadence in the company. ● Manage the preparation of the Board and Board Committee materials and ensure that items are submitted within the relevant deadlines. ● Manage the third party vendors in the procurement tool to ensure: o Contracts are validated o PO's and Invoices are processed in a timely manner o Approvals are received from relevant stakeholders ● DORA: Oversee remediation activities and ensure IT controls are updated accordingly. ● Learning: Ability to assign time to ensure latest regulatory updates are assessed, understood and communicated to P&T team. Action plans created as necessary. ● Provide a formal monthly reporting mechanism to management on the status of all activities. ● New Technology oversight Key Responsibilities Responsibility ● IT Controls Oversight ● Risk SPOC and SME for Product and Technology ● Compliance SPOC and SME for Product and Technology ● Audit Engagement and management ● Formal monitoring of Product and Technology controls. ● Vendor Invoice and Contract Management ● Regulatory Projects - including DORA and PSD3 ● Policy management ● Management of Board and Board Committee updates. Knowledge and Skills ● Oversight on External and Internal Audit programmes ● 5 years experience in similar role ● Oversight of IT Controls - Multi tasking ● Experience in regulated industry ● Risk experience as SME 

Call Lindsay O'Leary for further spec details. 00 86

#LI-LO1