IT GRC Specialist: SOX, ISO 27001 & PCI Compliance

Midland Credit Management, Inc.; England; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Discount & cash back on high-street

Private health insurance

Bonus scheme

Job summary

Cabot Financial seeks an IT Governance, Risk & Controls specialist to strengthen and expand our IT control environment across the UK and Europe. You will design, implement and embed governance and operational controls, ensuring processes such as backup, vulnerability, resilience and operations are well governed and evidenced.

You’ll work with IT Operations, Risk, Compliance, Audit and business stakeholders to drive best practice across regulatory frameworks while supporting a culture of strong

Qualifications

• Proven track record delivering IT governance or risk and controls in complex organisations.
• Experience designing, implementing and embedding IT controls and governance across IT Operations.
• Knowledge across regulatory frameworks including SOX, ISO27001, NIST and PCI.

Responsibilities

• Develop, implement and improve IT Governance, Risk and Control frameworks across IT Operations.
• Review and maintain IT policies, procedures and controls to ensure compliance and alignment with regulatory requirements.
• Act as IT Operations contact for audits, coordinating responses and evidence collection across SOX, ISO27001, NIST and PCI.
• Monitor, report on and support remediation of audit findings and IT risks.
• Provide guidance on governance, risk and compliance to IT Operations and stakeholders.
• Embed best practice through partnership with Risk, Compliance, Audit and IT teams.

Skills

IT governance

Risk & controls

SOX

ISO 27001

NIST

PCI

Tools

Audit coordination

Policy & control design

Job description

Cabot Financial seeks an IT Governance, Risk & Controls specialist to strengthen and expand our IT control environment across the UK and Europe. You will design, implement and embed governance and operational controls, ensuring processes such as backup, vulnerability, resilience and operations are well governed and evidenced.

You’ll work with IT Operations, Risk, Compliance, Audit and business stakeholders to drive best practice across regulatory frameworks while supporting a culture of strong