IT Controls Analyst

La Fosse Associates; England; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading global insurance company is seeking a Contract IT Controls Analyst to perform control testing and evaluate IT controls' effectiveness. The role requires assessing design and operational effectiveness, supporting compliance initiatives, and managing IT risks. Candidates should have proven experience in IT controls, strong analytical skills, and familiarity with ISO 27001, NIST, and COBIT frameworks. The position is based in Central London, with a day rate of £600-£650 and an initial duration of 6 months.

Qualifications

• Proven experience in IT controls testing or audit.
• Strong knowledge of IT general controls and risk assessments.
• Excellent analytical and documentation skills.

Responsibilities

• Perform IT control testing and assess effectiveness.
• Support governance and compliance initiatives.
• Identify and manage IT risks effectively.

Skills

IT controls testing

Risk management

Analytical skills

Documentation skills

Knowledge of ISO 27001

Knowledge of NIST

Knowledge of COBIT

Job description

IT Controls Analyst (Contract)

A Global Insurance Company requires a Contract IT Controls Analyst to perform control testing to evaluate the design and operating effectiveness of IT controls.

• Day Rate: £600-£650pd
• IR35 Status: Inside
• Duration: Initial 6 months
• Travel: 2-3 days a week in Central London

This IT Controls Analyst will have the following experience:

• Perform IT control testing across multiple domains, assessing design and operating effectiveness, gathering and validating evidence, and clearly documenting results, control gaps, and observations.
• Support governance and compliance initiatives by assisting with control maturity assessments, maintaining audit‑ready documentation, and ensuring alignment with frameworks such as ISO 27001, NIST, and COBIT.
• Identify and manage IT risks by evaluating control gaps, assessing potential impacts, and collaborating with technical teams to develop and track remediation plans through to completion.
• Provide coverage across a broad range of IT control areas, including cloud operations, backups and data protection, access management (including privileged access), IT service management, configuration standards, disaster recovery, monitoring and logging, and vulnerability management.
• Bring proven experience in IT controls testing, IT risk, or audit, strong knowledge of IT general controls, hands‑on experience with risk assessments and remediation tracking, excellent analytical and documentation skills, and preferably exposure to regulated industries.