Technology Risk & Controls Manager

Join us as a Technology Risk & Controls Manager

• We are looking for an individual to lead and perform Technology Controls testing and reviews
• If you have a background in risk and control assessment, testing technology Sox controls then join our team in helping to anticipate and assess the potential impacts of risk across the bank
• We’ll look to you to proactively drive the assessment and implementation of risk framework and policy compliance and changes, converting these into appropriate strategies and action plans
• In this highly collaborative role, you’ll have an ideal platform for building your network and advancing your career, while helping to create a safer environment for the bank

You’ll have the responsibility of supporting management in their identification and assessment of material risks, and in determining their position relative to agreed appetites. Working with senior stakeholders across the bank, you’ll look to drive the SOX risk assessment technology SOX and Non-SOX control testing for Services.

On top of this, you’ll be supporting a culture of proactive and pre-emptive risk management and continuous improvement, and the attainment of operational risk objectives.

You’ll also be:

• Planning and scoping to undertake control testing, quality control reviews, control deficiency resolution management and reporting
• Engage with external auditors to communicate SOX scope coverage testing plan and understanding their focus
• Guide and Influence senior business and It stakeholders on SOX and internal control requirements and SOX improvements initiatives including controls rationalisation and automation
• Create a culture of continuous improvement increasing efficiency and productivity through great people leadership coaching engagement and development of skills

To be successful in this role, you’ll need good understanding of Technology, the SOX framework and the ability to lead SO risk assessment and secure technology controls testing in line with internal control and external audit requirements. You’ll also need excellent communication skills in order to work well within the team, as well as being able to negotiate with, and influence, stakeholders across an organisation. Experience in testing IT General controls is mandatory. The following is preferred but not mandatory:

• Experience with Oracle, SQL and Unix.
• CISA/CISSP/CRISC/ISO27001(LA) certifications
• Knowledge of COBIT, COSO, NIST, ISO27000

You’ll also bring:

• A good understanding of the relevant business and the risk and control environment
• Ability to communicate complex ideas and solutions to both business and technical audiences
• The ability to summarise material from a variety of complex sources to support executive commentary within the financial marketplace