Security Auditor

Harvey Nash; Brussel Hoofdstad; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Harvey Nash is seeking a Senior Auditor in Belgium to independently assess governance, risk management and control processes. You will perform field audits, document results and report findings to senior management, ensuring effective mitigation of operational and compliance risks across the organization.

The role requires over 5 years of audit experience, strong analytical and communication skills, and the ability to work independently with a hands-on, pragmatic approach.

Qualifications

• Performing, documenting and following up first-line controls on operational and compliance risk
• Developing and implementing action plans to address identified gaps
• Analysing processes to identify weaknesses and driving improvements
• Understanding domains such as outsourcing, DORA, third-party risk management, AML and GDPR

Responsabilités

• Perform field audit activities when needed and report results
• Register and report risks, controls, findings and actions
• Provide clear management reporting on risks, controls and bottlenecks
• Act as a sparring partner for business on non-financial risks and compliance points of attention
• Contribute to increased risk awareness by translating risks into practical terms for the business

Connaissances

Analytical thinking

Critical thinking

Decision making

Eager to learn

Effective communication

Group facilitation

Independent

Process driven

Quality driven

MetricStream

Outils

MetricStream

Description du poste

As a senior Auditor, you have over 5 years of experience in providing an independent and honest opinion on the risks and mitigating measures of the organization :

- You assess the effectiveness of governance, risk management, and control processes designed to help the organization achieve strategic, operational, financial, and compliance objectives;

- You perform quality checks on the implementation and execution of the approved procedures and instructions;

- You organize and execute field audit activities, when needed;

- You report (in writing) on the work carried out and the results obtained.

Next to a proven experience in Audit, you have the following core competences : Analytical thinking, Critical thinking, Decision making, Eager to learn, Effective communication, Group facilitation, Independent, Process driven, Quality driven

.
Tas

• ksPerforming, documenting and following up first-line controls on operational and compliance risk
• s.Analysing existing processes, identifying weaknesses and formulating concrete improvement action
• s.Identifying and assessing operational risks and compliance risks, including in domains such as outsourcing, DORA, third-party risk management, product approvals, business continuity, AML and GDP
• R.Developing feasible measures to prevent, limit or better control identified risk
• s.Implementing, coordinating and following up action points arising from risk assessments, controls, incidents, audits, developments in outsourcing/DORA/third-party risk, group exercises or management decision
• s.Supporting the further strengthening of the internal control framework within the first lin
• e.Registering, following up and reporting on risks, controls, findings and action points in MetricStrea
• m.Preparing clear management reporting on risks, controls, outstanding actions, bottlenecks and progres
• s.Acting as a sparring partner for the business on questions relating to non-financial risks, control requirements and compliance-related points of attentio
• n.Contributing to increased risk awareness within the organisation by translating risks and requirements into understandable and practical terms for the busines

s.Skil

lsThe consultant preferably ha

• s:Demonstrable experience with operational risk management, internal control or compliance within a regulated financial environmen
• t.Practical knowledge of first-line controls, risk assessments, action tracking and management reportin
• g.Knowledge of domains such as outsourcing, DORA, third-party risk management, AML, GDPR, product approvals and business continuit
• y.Experience with MetricStream or another GRC platform is a mus
• t.Experience with documenting and following up findings, controls and action plan
• s.A structured and accurate working styl
• e.A critical but constructive attitude, with the ability to challenge processes and control
• s.Strong communication skills in Dutch and Englis
• h.The ability to work independently, set priorities and collaborate with different stakeholder
• s.A hands-on mentality and sufficient pragmatism to effectively help implement improvement