We are seeking a highly skilled professional to lead the overall definition and execution of our Technology Assurance framework and programs. This role will guide, monitor, evaluate, and report on the efficiency of internal controls related to technology, ensuring compliance with regulatory requirements and industry standards. Define and execute the Technology Assurance framework, ensuring alignment with organizational goals and regulatory standards. Serve as the subject matter expert on compliance requirements related to technology, providing expertise on control/process documentation, testing, and issue management. Lead collaboration efforts with the Group InfoSec Governance team to assess critical gaps against standards and regulatory requirements, both internationally and locally. Conduct expert-level evaluations of technology controls throughout the business cycle, advising on the design and effectiveness of key controls.
Mandatory Skill(s)
- Minimum 6-8 years of experience in IT Audit and Risk Assessment;
- Degree from Information Technology or equivalent discipline;
- One of industry recognized certification such as CGEIT, CISSP, CISM, CISA, ISO 27001, CRISC, PCI DSS etc;
- Excellent stakeholder management and communication skills;
- Project delivering experience;
- Solid understanding of current and emerging technologies;
- Understanding of IT SOX and other IT/IS frameworks and best practices such as COSO, COBIT, ITIL, ISO 27001, SOC 2, 3, etc.
Desirable Skill(s)
- Good knowledge of privacy regulations and data protection;
- Detailed oriented and able to work under pressure and accustomed to work under tight deadlines;
- Team-oriented, collaborative, diplomatic and flexible;
- Strong written and verbal communication skills, strong interpersonal skills and the ability to communicate effectively across business units.
Responsibilities
- Contribute and support the Head of Technology Assurance & Information Security Governance in defining, developing and maintaining technology assurance framework in accordance with the Group Technology Roadmap;
- Work closely with senior management of business units and within Group Technology through tracking and reporting function, to ensure regular updates to management on the Technology Assurance programs;
- Be accountable for the planning, management and execution of the day-to-day activities of Technology related audit engagements;
- Ensure system and control owners are identified; and coordinate with owners to support technology assurance and assessment activities;
- Collaborate with key technology, business, risk, audit and compliance teams to identify, evaluate and address critical technology related risks;
- Proactively research industry trends and define, influence and implement appropriate and practical technology related KRIs, metrics and solutions to create and enhance process efficiency and address key risks;
- Advise BUs on Technology risk assessment;
- Working on a group level work with all stakeholder to gather and organise and deliver key business requirements;
- Ensure the accuracy and consistency of the technology assurance program;
- Ensure Technology controls are compliant against required standards/ benchmarks and best practices;
- Ensure timely implementation of recommendations for remediating the weaknesses/deficiencies.
If you are interested in this role, click on the “Apply to this job” button below or you could also write in with your CV to Binod Chetri at binod.c@sciente.com quoting the job title.
