IT Risk & Controls Specialist (Contractor)
Core
Second-line technology controls testing focusing on ITGCs, IAM/access management, change management, and IT operations controls.
Role type
Second-line IT controls testing specialist
Builds
Control testing evidence and documentation aligned with governance standards
Domain
Financial services / Insurance / IT Risk & Compliance
Required skills
IT general controls testing, Security controls testing, Access management testing, Change management testing, IT operations controls testing, Control design assessment, Operating effectiveness assessment, NIST framework knowledge, COBIT framework knowledge, ISO 27001 knowledge, Documentation, Stakeholder management
Preferred skills
Cloud security governance (Azure/AWS), Third-party assurance and controls testing, Data governance, Automated controls testing, Financial services/insurance domain knowledge, APRA controls knowledge
Technologies
Azure, AWS, NIST, COBIT, ISO 27001
Responsibilities
Deliver 2nd line IT controls testing across ITGC and security controls, Test access management, change management and IT operations controls, Assess control design and operating effectiveness, Document test procedures, evidence, results and issues, Support business and finance controls testing and audit requests, Work with Technology, Information Security, Risk, Compliance and Audit stakeholders, Provide control and policy interpretation and support remediation activities, Contribute to risk governance activities and continuous improvement
Seniority
Mid-level, hands-on IC
