IT Audit and Security Assurance Specialist

I-confidential; London; On-site; GBP 50,000 - 80,000; Full time

Job summary

A forward-thinking company is seeking an IT Audit and Security Assurance Specialist to join their dynamic team. This role involves leading audit engagements, particularly in ISO27001 compliance, and developing assurance frameworks. You will work in a highly regulated financial environment, providing critical support for various technology and security assurance projects. Ideal candidates will have a background in 'Big 4' consultancy and a passion for enhancing risk governance processes. Join this innovative firm to make a significant impact on their assurance strategy and contribute to a secure operational environment.

Qualifications

• Expertise in ISO27001 and audit methodologies.
• Experience in developing assurance processes and frameworks.

Responsibilities

• Provide support for Technology and Security Assurance projects.
• Perform internal risk and control assurance and testing.

Skills

ISO27001

Audit and Assurance

Control Testing

Risk Assessment

Stakeholder Management

Education

ISO27001 Lead Auditor Certification

Job description

IT Audit and Security Assurance Specialist

We are currently looking for a Security Assurance and Audit specialist with technical and security expertise who has led and performed audit and assurance engagements, specifically relating to ISO27001.

This is to join an existing team at our financial services client, in a highly regulated environment.

The role will be to provide expertise and support to various Technology and Security Assurance projects and work on the development and delivery of the 2nd Line Risk Assurance plan.

Applicants with a background in "Big 4" Consultancy would be of particular interest.

• Development of the assurance process and framework.
• ISO27001 Lead Auditor certification
• Perform control testing, control walkthroughs and gathering of evidence from the 1st Line Business team.
• Perform internal risk and control assurance using the assurance methodology to determine control effectiveness, ensuring compliance to internal policies, standards/processes, best practices and industry standard and frameworks.
• Complete documentation of control testing and reporting for senior management review.
• Work with relevant stakeholders in the 1st line team to identify appropriate remedial actions, for issues identified through testing.
• Support the definition of a control library, creation and review of controls ensuring alignment to internal policies and external frameworks e.g. CRI, ISO, NIST, ISAE.
• Perform internal control assessment/audit for SWIFT CSCF, LINK CSB, ISO27001 and IS022301.
• Development of appropriate assurance internal documentation.
• Preparing relevant submissions into risk governance committees.

#LI-DNI