Description
IT Risk Auditor
Summary profile
Several years' experience in a Non-Financial Risk role for large corporations or consulted for large corporations
CISM or CISA certified is a big plus
Specialised in IT Risk management
Tasks
Review Operational Security Guidelines documents for compliance with the Bank's Guidelines and minimum standards (Bank's provides guidelines documents)
Assist the DevOps teams with bringing the documents up to level with the new guidelines
Assist in uploading the evidences of compliance with the guidance into the evidencing dashboard
Follow up with the DevOps teams to ensure that any identified gaps are indeed prioritised in their backlogs
Assist the internal NFROs
Perform second line type challenging of the OSG documents