Lead Risk & Control Analyst

The ideal candidate will have a strong background in controls testing within financial services and excellent analytical and problem-solving skills.

Key responsibilities:

• Design and execute controls testing strategies to evaluate the design adequacy and operating effectiveness of controls.
• Create test plan, test scripts etc. to support the delivery of GCIO controls assurance objectives.
• Prepare detailed testing documentation, workpapers and reports to highlight findings and recommendations.
• Collaborate with various departments within GCIO for control walkthroughs, sampling, evidence collection etc.
• Maintain up-to-date knowledge of industry standards and best practices related to controls testing.
• Support the creation of GCIO Controls Assurance management information (MI)
• Participate in audits and assessments, providing support and insights as needed.
• Provide training and support to junior team members on controls testing methodologies.
• Support Controls Assurance Lead to continuously identify and implement improvements within the assurance framework.

Skills Experience Required

• 8-10 years experience in controls testing and/or internal audit.
• Strong understanding of industry standards like NIST and ITIL
• Excellent analytical and problem-solving skills
• Strong understanding of regulatory requirements and industry best practices related to controls assurance, relevant to GCIO risks - such as Information Technology (IT), Information Security (IS), and/ or Data Management
• Exceptional communication skills, both verbal and written, with the ability to influence and engage stakeholders at all levels.
• Experience operating in a regulated environment and managing stakeholders across the Three Lines of Defense.
• Strong organization skills and attention to detail.
• Familiarity with cyber security, resilience and related domains preferred.
• Prior experience with Service Now Integrated Risk Management (SNOW - IRM) preferred.

Qualifications

• Bachelor s degree in Information Technology (IT), Computer Science, or a related field; relevant certification (e.g., CISA, CISSP) preferred.