Description
IT Risk Specialist (ISO27001/NIST/Risk/Controls)
PLEASE NOTE: This contract falls inside IR35.
DGH Recruitment are currently recruiting on behalf of a leading client in the financial services industry who are looking for an IT Risk Specialist to join the team in their London office.
The successful candidate will support with the day-to-day management of the IT Risk Management Framework and the IT Key Control Framework for the business.
Responsibilities:
- Maintaining the IT Risk Register and oversight of the risk profile for the IT function
- Driving improvements to the IT risk management capability
- Supporting stakeholders within the function to identify, assess, respond to, and report on IT risk
- Creation of appropriate risk reporting, to facilitate risk and control discussion, and inform risk-based decision making
- Delivering both light-touch and deep-dive IT risk assessments
- Managing the IT Risk and Control Self-Assessment process
- Continuous review and assessment of the impact of transformational change on the Technology control environment
Required Skills/Experience:
- Certification in at least one of the following: CISA, CGEIT, CRISC or equivalent is expected.
- Strong experience in Technology Risk Management
- IT Control Frameworks (ISO27001, NIST, CIS, ISF)
- IT Auditing/Key Control Testing (TOD/TOE)
- Stakeholder Management
IT Risk Specialist (ISO27001/NIST/Risk/Controls)
In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.
DGH Recruitment Limited acts as both an Employment Agency and Employment Business