IT Audit and Security Assurance Specialist

i-confidential Limited; London; On-site; GBP 60,000 - 90,000; Full time

Job summary

An established industry player is looking for a Security Assurance and Audit Specialist to join their team in London. This role is crucial for ensuring compliance with ISO27001 and other frameworks in a highly regulated financial environment. The successful candidate will lead audit engagements, develop assurance processes, and collaborate with stakeholders to enhance security measures. If you have a strong background in security assurance and experience in 'Big 4' consultancies, this is an exciting opportunity to make a significant impact in a pivotal role.

Qualifications

• Experience in leading audit and assurance engagements, particularly ISO27001.
• Background in 'Big 4' consultancy firms is a plus.

Responsibilities

• Develop assurance processes and frameworks for security audits.
• Conduct internal risk assessments and document control testing.

Skills

ISO27001

Security Assurance

Audit Engagements

Risk Assessment

Control Testing

Education

ISO27001 Lead Auditor Certification

Bachelor's Degree in a related field

Tools

SWIFT CSCF

ISO22301

NIST

ISAE

Job description

Job Title: Security Assurance and Audit Specialist

We are currently seeking a Security Assurance and Audit specialist with technical and security expertise, particularly experienced in leading and performing audit and assurance engagements related to ISO27001.

This role involves joining an existing team at our financial services client operating in a highly regulated environment.

The main responsibilities include providing expertise and support for various Technology and Security Assurance projects and contributing to the development and delivery of the 2^nd Line Risk Assurance plan.

Applicants with a background in “Big 4” consultancy firms will be of particular interest.

Key Responsibilities:

1. Development of the assurance process and framework.
2. Obtaining and maintaining ISO27001 Lead Auditor certification.
3. Performing control testing, control walkthroughs, and gathering evidence from the 1st Line Business team.
4. Conducting internal risk and control assurance to evaluate control effectiveness and ensure compliance with internal policies, standards, and industry frameworks.
5. Documenting control testing and preparing reports for senior management review.
6. Collaborating with stakeholders in the 1st line team to identify remedial actions for issues identified during testing.
7. Supporting the creation of a control library and reviewing controls to ensure alignment with internal policies and external frameworks such as CRI, ISO, NIST, ISAE.
8. Performing internal control assessments/audits for SWIFT CSCF, LINK CSB, ISO27001, and ISO22301.
9. Developing internal assurance documentation.
10. Preparing submissions for risk governance committees.

#LI-DNI