Description

Manage risk and control processes within the Cyber Security Risk Control framework, focusing on strategy, compliance, and remediation.

This role is on-site.

Responsibilities

• Define and implement strategies for mapping control frameworks to risk management processes.
• Establish end-to-end processes for controls and compliance, including evidence and issue management.
• Execute Risk Control Self-Assessment (RCSA) processes.
• Identify and remediate cyber security control shortfalls using manual and technological solutions.

Required Skills

• 3-5 years of experience in risk and control management.
• 3-5 years in audit, accounting, or risk management roles within IT or information security.
• Knowledge of control framework standards including NIST, ISO, and SOC2.
• Proficiency with Microsoft 365 (Project, PowerPoint, Excel, Word).
• Experience with operational risk management or information security controls.
• Bachelor's degree or equivalent graduate qualification.

Preferred Skills

• Public accounting or Big Four audit experience.
• CISA Certification.
• SOX experience.

Key Skills

Education

Any Gradute