IT Audit/Assurance Specialist

I-confidential; London; On-site; GBP 50,000 - 90,000; Full time

Job summary

An established industry player is seeking a Security Assurance and Audit specialist to enhance their team in a highly regulated financial environment. This role involves leading audit engagements, particularly related to ISO27001, and providing critical support for various technology and security assurance projects. The ideal candidate will have a strong background in security assurance, particularly from a 'Big 4' consultancy, and will be responsible for developing assurance frameworks, performing risk assessments, and ensuring compliance with internal policies and industry standards. This is a fantastic opportunity to make a significant impact in a dynamic and challenging field.

Qualifications

• Proven experience in security assurance and audit engagements.
• ISO27001 Lead Auditor certification is essential.

Responsibilities

• Develop assurance processes and frameworks for compliance.
• Perform internal risk and control assurance and testing.

Skills

Security Assurance

Audit Engagements

ISO27001

Risk Assessment

Control Testing

Education

ISO27001 Lead Auditor Certification

Job description

We are currently looking for a Security Assurance and Audit specialist with technical and security expertise who has led and performed audit and assurance engagements, specifically relating to ISO27001.

This is to join an existing team at our financial services client, in a highly regulated environment.

The role will be to provide expertise and support to various Technology and Security Assurance projects and work on the development and delivery of the 2nd Line Risk Assurance plan.

Applicants with a background in "Big 4" Consultancy would be of particular interest.

Responsibilities:

• Development of the assurance process and framework.
• ISO27001 Lead Auditor certification.
• Perform control testing, control walkthroughs and gathering of evidence from the 1st Line Business team.
• Perform internal risk and control assurance using the assurance methodology to determine control effectiveness, ensuring compliance to internal policies, standards/processes, best practices and industry standard and frameworks.
• Complete documentation of control testing and reporting for senior management review.
• Work with relevant stakeholders in the 1st line team to identify appropriate remedial actions, for issues identified through testing.
• Support the definition of a control library, creation and review of controls ensuring alignment to internal policies and external frameworks e.g. CRI, ISO, NIST, ISAE.
• Perform internal control assessment/audit for SWIFT CSCF, LINK CSB, ISO27001 and IS022301.
• Development of appropriate assurance internal documentation.
• Preparing relevant submissions into risk governance committees.