IT Risk & Controls Specialist (Contractor)

Ethos BeathChapman; Sydney; On-site; AUD 90,000 - 120,000; Full time

Job summary

Ethos BeathChapman in Sydney is seeking a Risk & Controls Specialist for a 6-month contract to join the Risk team on second-line technology controls testing focused on ITGCs, IAM and change management.

The role involves testing, documenting procedures and evidence, and collaborating with Technology, Security, Risk and Audit stakeholders to ensure effective controls design and operation.

Qualifications

• 2-3 years' Big Four IT audit or controls testing experience.
• Hands-on experience testing IT general controls and security controls.
• Knowledge of frameworks such as NIST, COBIT or ISO 27001.
• Experience in financial services/insurance and APRA controls is desirable.
• Strong documentation, stakeholder management and communication skills.
• This is a great opportunity for someone with solid controls testing experience who can work independently and deliver high-quality testing outcomes.

Responsibilities

• Deliver 2nd line IT controls testing across ITGC and security controls.
• Test access management, change management and IT operations controls.
• Assess control design and operating effectiveness and challenge management where required.
• Perform testing aligned to NIST security domains and relevant technology risk frameworks.
• Document test procedures, evidence, results and issues in line with governance standards.
• Support business and finance controls testing and audit requests.
• Work with Technology, Information Security, Risk, Compliance and Audit stakeholders.
• Provide control and policy interpretation and support remediation activities.
• Contribute to risk governance activities and continuous improvement.

Skills

IT controls testing

IT general controls

Security controls

NIST framework

COBIT

ISO 27001

Cloud security governance

Azure

AWS

Data governance

Automated controls testing

Stakeholder management

Communication skills

Job description

We're looking for a Risk & Controls Specialist to join our Risk team on a 6-month contract.

Sydney ONLY

This role will focus on second-line technology controls testing, with particular emphasis on ITGCs, IAM/access management, change management and IT operations controls.

Duties

Deliver 2nd line IT controls testing across ITGC and security controls.

Test access management, change management and IT operations controls.

Assess control design and operating effectiveness and challenge management where required.

Perform testing aligned to NIST security domains and relevant technology risk frameworks.

Document test procedures, evidence, results and issues in line with governance standards.

Support business and finance controls testing and audit requests.

Work with Technology, Information Security, Risk, Compliance and Audit stakeholders.

Provide control and policy interpretation and support remediation activities.

Contribute to risk governance activities and continuous improvement.

Profile

2-3 years' Big Four IT audit or controls testing experience

Hands-on experience testing IT general controls and security controls

Knowledge of frameworks such as NIST, COBIT or ISO 27001

Experience in financial services/insurance and APRA controls is desirable

Strong documentation, stakeholder management and communication skills

This is a great opportunity for someone with solid controls testing experience who can work independently and deliver high-quality testing outcomes.

Technical Experience

Experience across the following areas is preferred / Cloud security governance (Azure/AWS) / Third-party assurance and controls testing. / Data governance / Automated controls testing.

MUST have PR/Citizenship OR Visa with no sponsorship requirements for a year.