IT Assurance and Compliance Specialist

Job description

Carry all the audits and act as POC for all escalations for any audit related activities within the IT department Support management to provide audit finding responses, implementation of controls as per audit recommendations etc and ensure all IT audit observations are taken to closure Perform periodic Technology Assurances / audit reviews to assess the adequacy, effectiveness and efficiency of the established system controls and procedures. Present assurance results to senior leadership with articulation on risks and gaps identified; be able to risk rank observations and prioritize remediation efforts Drive efficiencies in the assurance process through control Automation; creating common assurance methodologies etc. Prepare / review assurance reports, assurance summaries and memos; root-cause analysis on issues and findings, and recommendations for management; review reports and correspondence are in alignment with internal assurance standards. Work closely with the stakeholders to ensure appropriate action plans are provided to mitigate the risks highlighted. Leads the execution of comprehensive assurance plans with oversight by the Head of IT Governance Effectively manage assurance team utilization to ensure assurance engagements are on time and within budget. Proactive project management and anticipate roadblocks with a solution-oriented mindset. Lead meetings with key assurance stakeholders to review key concepts, gaps or issues with risk management and control design elements, support and conclusions. Adapt testing approach based on risks identified. Timely escalation of potential significant findings to the IT Governance Head Present initial assurance observations to the leadership and assurance stakeholders. Create and Review assurance workpapers to ensure they are clear, align to the approved scope and adhere to IA methodology. Conduct lessons learned sessions with the assurance team for continuous improvement. Provide insights to the IT Governance Head and IT Management to facilitate stakeholder assurance feedback discussion. Conduct ongoing monitoring and validation of management action plans for assurance observations. Embrace an equitable and inclusive environment where people can bring their full selves to work and unlock their greatest potential and contributions to the team. Stay abreast of new and emerging regulations & trends that impacts the risk landscape and rapidly adjust assurance plan or procedures accordingly. Identify and develop standard assurance work programs. Helps to establish and manage use of automated workflows to increase the efficiency and coverage of risks within the assurance process. Identifies opportunities for improvement to assurance methodology, tools, and training. Manages and develops direct reports to strengthen leadership capability and assurance competency. Coaches their assurance team members in building assurance and technology acumen. Drive preparation of the report for each engagement ensuring findings, action items and recommendations are practical and actionable. Communicate effectively with internal and external management to align on assurance observations and recommendations. Drive data analysis in risk assessment and execution of assurances. Create monthly and quarterly IT governance packs for senior management Excellent analytical and investigation skills to identify underlying technology issues and demonstrate ability to problem solve and viable solutions CISA / CISSP / CRISC / CGEIT/ PMP or any industry endorsed certification preferred Sound understanding of control environment, compliance, and risk frameworks such as CoBIT; PCI-DSS, COSO; ISO 27001 standards, etc. Proficiency in IT systems, General Computer controls, Cybersecurity, SOX programs, Etc Minimum 5 to 8+ years of experience Excellent project / program management skills Experience in performing Risk Assessments / Technology Assurances / IT Operations focused reviews / Leading SOX programs Be able to work in a fast-paced role with competing priorities. Adaptable to project requirements and does what is required to get the job done Preferred Skills & Qualification Preferred experience in any of the BFSI / FinTech companies / IT Consulting / IT Services Organizations Experience implementing Continuous Control Monitoring /Control Automation. Preferences will be given to Candidates with previous experience in GCC All your information will be kept confidential according to EEO guidelines. We are a fast growing Digital Transformation Consulting & Technology Organisation, operating in the ME region. We work with Leading clients in multiple sectors and maintains a successful track records of delivery.