Technology Consultant (Resilience, PAM & IAM)

Talan Group; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

Talan Group is looking for an experienced Technology Consultant in London to lead a critical remediation programme aimed at strengthening technology controls.

The role involves assessing and improving control designs and maintaining effectiveness across Operational Resilience, PAM, and IAM.

Expect a significant chance for contract extensions when delivering strategic remediation activities and engaging with various stakeholders.

Qualifications

• Experience in technology risk or IT controls, specifically in financial services.
• Proven experience in control remediation in regulated environments.
• Strong understanding of operational resilience and disaster recovery.

Responsibilities

• Review underperforming controls identifying root causes and gaps.
• Define and execute structured remediation plans with ownership.
• Collaborate with stakeholders to track remediation progress.

Skills

Control assessment

Risk management

Stakeholder management

Analytical capability

Technical and non-technical communication

Remediation lifecycle management

Tools

PAM tooling

RCSA

Job description

Technology Consultant (Resilience, PAM & IAM)

Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness.

Contract with strong chance of extensions

Location - London

On-Prem 4 days per week

This role will play a central part in enhancing controls related to:

• Operational Resilience
• Privileged Access Management (PAM)
• Identity & Access Management (IAM)

You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard.

Key Responsibilities

Control Assessment & Diagnosis

• Review underperforming controls to identify:
  • Root causes
  • Design deficiencies
  • Operating effectiveness gaps
• Assess whether current control designs are fit for purpose and aligned with regulatory expectations

Remediation Planning & Execution

• Define structured remediation plans, including:
  • Actions
  • Ownership
  • Milestones
  • Evidence requirements
• Drive delivery of remediation activities in collaboration with control owners and SMEs

Stakeholder Engagement

• Partner with:
  • Technology and engineering teams
  • Risk & compliance functions
  • Internal audit and assurance stakeholders
• Provide constructive challenge to ensure robust and sustainable control improvements
• Support optimisation of control operating models, including:
  • Control frequency
  • Evidence standards
  • Accountability models
  • Governance processes
• Embed consistent control discipline across resilience, PAM, and IAM domains

Governance & Reporting

• Track remediation progress and proactively escalate:
  • Risks
  • Blockers
  • Overdue actions
• Produce clear, concise reporting for:
  • Senior stakeholders
  • Governance forums
• Review remediation evidence to confirm completeness and sustainability

Audit & Assurance Readiness

• Support preparation for:
  • Control testing
  • Internal/external audit
  • Regulatory reviews
• Ensure remediation outcomes are defensible and audit-ready
• Proven experience in one or more of the following:
  • Technology Risk / IT Controls
  • Cyber Risk
  • IT Audit
  • Operational Resilience
• Strong track record delivering control remediation in:
  • Financial services
  • Banking
  • Regulated environments
• Experience assessing:
  • Control design effectiveness
  • Operating effectiveness
• Familiarity with:
  • Risk & Control Self-Assessments (RCSA)
  • Audit findings and issue management
  • Assurance and regulatory reviews
• Demonstrated ability to manage remediation lifecycle from identification through to closure

Operational Resilience

• Understanding of:
  • Critical business services
  • Disaster recovery & business continuity
  • Technology recovery controls
• Experience with:
  • Resilience testing evidence
  • Impact tolerances
  • Recovery plans & continuity procedures

Privileged Access Management (PAM)

• Knowledge of:
  • Privileged account governance
  • Joiner-Mover-Leaver processes
  • Access recertification and reviews
• Exposure to:
  • PAM tooling (e.g. vaulting solutions)
  • Break-glass access
  • Session monitoring
  • Privileged account ownership models

Identity & Access Management (IAM)

• Experience with:
  • Access provisioning & de-provisioning
  • Role-based access controls (RBAC)
  • Segregation of duties (SoD)
• Strong understanding of:
  • Access reviews and governance
  • IAM control testing
  • Leaver controls

Key Skills & Attributes

• Strong analytical capability in control assessment and remediation design
• Ability to translate complex control issues into practical, actionable solutions
• Excellent stakeholder management across technical and non-technical audiences
• High-quality written communication, including senior-level reporting
• Confident in constructively challenging control owners
• Comfortable operating in ambiguous, fast-paced environments
• Strong attention to detail, particularly in reviewing remediation evidence