Risk Manager - in London

www.cardandpaymentjobs.com; England; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading risk management firm in the United Kingdom is seeking a Risk Manager to support SOC1/SOC2 audits and maintain ISO27001 certification. The ideal candidate will have at least 5 years of experience in managing IT audits, with knowledge of PCI DSS and IT systems. This role offers competitive opportunities for growth and development in a collaborative environment.

Qualifications

• At least 5 years’ experience in managing IT audits.
• Experience with SOC reports, ISO certifications or PCI DSS assessments.

Responsibilities

• Support annual SOC1/SOC2 audits and internal reviews.
• Maintain ISO27001 certification through audits.
• Support PCI assessments as required.

Skills

Team player

Effective communication

Strong analytical skills

Report writing

Presentation skills

IT risks and controls knowledge

Job description

Overview

Risk manager – Welwyn Garden City OR Sheffield

Risk, SOC1, SOC2, IT audits, PCI, ISO 27001, CISA, CISM

Our client is growing their Risk team and as such require a Risk Manager to join their expanding team

Job scope

• Supporting the annual SOC1/SOC2 audits and regular internal reviews
• Maintaining ISO27001 certification through regular internal reviews and external audits
• Supporting PCI assessments as required

Day to day you will be :

• Gathering and reviewing audit evidence
• Process and controls reviews for improvement
• Audit preparation and management
• Maintaining ISO27001 certification through regular internal reviews and external audits
• Achieving ISO27001 certification
• Gathering and reviewing audit evidence
• Process and controls reviews for improvement
• Audit preparation and management

Qualifications

Key skills:

• Team player who can work in a collaborative environment
• Effective communication and interpersonal skills
• Strong analytical, report writing and presentation skills
• Keen learner and committed to presenting high quality deliverables within agreed timescales

Useful Knowledge:

• IT risks and controls
• Technical knowledge of IT systems; operating systems and applications
• IT auditing
• SOC1/2 reporting
• ISO27001 standard
• PCI DSS and payment industry

Experience:

• At least 5 years’ experience in managing IT audits including SOC reports, ISO certifications or PCI DSS assessments