IT Risk and Controls Assurance Specialist

DiceTek UAE; Abu Dhabi; On-site; AED 300,000 - 520,000; Full time

Job summary

Dicetek LLC seeks an experienced IT Risk and Controls Assurance Specialist for a full-time, on-site role in Abu Dhabi, United Arab Emirates. The role focuses on independently assessing IT control effectiveness, reviewing remediation evidence and supporting regulatory and internal audit closure activities in banking or regulated financial-services environments.

You will evaluate control designs, policies, procedures and operating evidence to determine remediation completeness and traceability,

Qualifications

• Minimum 7 years in IT risk, controls, audit or assurance.
• Banking or regulated financial services experience preferred.
• Strong ability to assess remediation evidence and control design.

Responsibilities

• Review remediation evidence and assess completeness, correctness and traceability.
• Evaluate control design and operating effectiveness against requirements.
• Coordinate with IT GRC, Internal Audit, Compliance and Technology teams.
• Document assurance conclusions and residual risks.
• Identify evidence gaps and provide remediation closure recommendations.

Skills

IT risk

IT controls

Audit & assurance

Regulatory experience

Banking industry

Tools

IT GRC tools

Job description

IT Risk and Controls Assurance Specialist Job Snapshot - Role: IT Risk and Controls Assurance Specialist - Location: Abu Dhabi, United Arab Emirates - Industry: Banking - Function: Risk Management-Compliance - Experience: Minimum 7 years in IT risk, controls, audit or assurance, including banking or regulated financial-services experience - Job Type: Full Time - Work Arrangement: On-site

Position Overview

Dicetek LLC is seeking an experienced IT Risk and Controls Assurance Specialist for a full-time, on-site position in Abu Dhabi, United Arab Emirates. The role focuses on independently assessing IT control effectiveness, reviewing remediation evidence and supporting regulatory and internal audit closure activities within a banking or regulated financial-services environment. The successful candidate will evaluate control designs, policies, procedures, approvals and operational evidence to determine whether remediation actions are complete, correctly implemented and supported by traceable documentation. Working with IT Governance, Risk and Compliance (IT GRC), Programme Management, Internal Audit, Compliance and Technology teams, the specialist will maintain assurance records, perform control testing, identify evidence gaps and provide documented recommendations on remediation closure. The position requires strong analytical judgment, independent challenge, technical control knowledge and the ability to communicate assurance findings clearly to stakeholders.

Key Responsibilities

Independent IT Controls Assurance

• Independently review remediation evidence submitted by first-line Technology and control owners.
• Assess evidence for completeness, correctness, relevance and traceability.
• Evaluate whether submitted documentation adequately supports claimed remediation outcomes.
• Review control design, implementation and operating effectiveness against applicable requirements.
• Identify unsupported conclusions, incomplete remediation activities and control weaknesses.
• Maintain independence when assessing first-line remediation and closure recommendations.
• Document assurance conclusions, assessment limitations and residual risks.

Control Design and Operating Effectiveness

• Assess technology policies, procedures and documented control designs.
• Review control implementation evidence and relevant management approvals.
• Evaluate operating evidence to determine whether controls function as intended.
• Conduct sample-based testing of selected controls and supporting records.
• Perform walkthroughs with relevant control owners to understand control operation.
• Identify differences between documented control requirements and actual operating practices.
• Record testing results, exceptions and supporting evidence in assurance workpapers.

Regulatory Remediation and Audit Closure

• Review remediation activities arising from regulatory assessments and audit findings.
• Evaluate closure packs for completeness and supporting evidence.
• Verify that remediation documentation addresses the underlying control findings.
• Identify outstanding evidence, incomplete actions and unresolved control deficiencies.
• Prepare evidence-based recommendations regarding remediation closure.
• Track dependencies and risks that may affect closure readiness.
• Document residual risks and limitations where remediation evidence does not fully support closure.
• Coordinate outstanding requirements with relevant programme and control stakeholders.

Assurance Planning and Documentation

• Develop and maintain assurance plans covering assigned control reviews and remediation activities.
• Prepare evidence requests and coordinate supporting documentation.
• Maintain assurance workpapers, testing records and assessment findings.
• Record review outcomes and associated closure recommendations.
• Maintain traceable links between findings, remediation actions and supporting evidence.
• Ensure assurance documentation is accurate, organised and suitable for subsequent review.
• Maintain records of unresolved issues and required follow-up activities.

Evidence Gap and Risk Tracking

• Identify missing, incomplete or inconsistent remediation evidence.
• Track overdue evidence requests and outstanding corrective actions.
• Monitor dependencies affecting assurance completion and remediation closure.
• Maintain visibility of unresolved findings and associated technology risks.
• Escalate significant evidence gaps and control concerns through appropriate channels.
• Follow up with responsible stakeholders on outstanding documentation and actions.
• Record the status of findings, remediation activities and closure assessments.

Technology Risk and Control Coverage

• Assess controls relating to technology governance and IT risk management.
• Review cybersecurity controls and associated assurance evidence.
• Evaluate relevant technology resilience and recovery controls.
• Assess service management controls and operational practices.
• Review third-party technology controls and supporting evidence.
• Consider control design, implementation and operating effectiveness when assessing remediation.
• Identify material control weaknesses and document their potential implications.

Management Reporting and Submission Quality Assurance

• Quality-assure management reporting materials relating to IT risk, controls and remediation.
• Review regulatory and audit submission packs for completeness and consistency.
• Verify that reported remediation status is supported by available evidence.
• Identify discrepancies between management reporting and underlying assurance records.
• Provide clear summaries of findings, evidence gaps and outstanding risks.
• Support accurate communication of assurance conclusions and closure recommendations.
• Ensure significant limitations and residual risks are appropriately documented.

Stakeholder Coordination

• Coordinate assurance activities with IT GRC and Technology stakeholders.
• Work with Programme Management teams on remediation progress and evidence requirements.
• Engage Internal Audit and Compliance teams regarding findings and closure expectations.
• Conduct walkthroughs and evidence discussions with relevant control owners.
• Communicate assessment findings and request clarification where evidence is insufficient.
• Provide constructive challenge while maintaining objective assurance standards.
• Support timely resolution of evidence gaps and outstanding assessment activities.

Required Experience

• Minimum 7 years of experience in IT risk, IT controls, audit or assurance.
• Experience within banking or regulated financial services.
• Practical experience reviewing IT control designs and operating effectiveness.
• Experience assessing remediation evidence and audit closure documentation.