Technology Consultant (Resilience, PAM & IAM)

Cloudspirit; Greater London; Vor Ort; GBP 55.000 - 75.000; Vollzeit

Zusammenfassung

Cloudspirit is seeking an experienced Technology Consultant to enhance controls for a key client in London. This role focuses on Operational Resilience, Privileged Access Management (PAM), and Identity & Access Management (IAM).

Key responsibilities include assessing existing controls, defining remediation plans, and engaging with stakeholders to drive action. Ideal candidates will have strong analytical and communication skills, with a proven ability to deliver improvements in financial services environments.

Qualifikationen

• Proven experience in Technology Risk and IT Controls.
• Strong track record in control remediation within financial services.
• Familiarity with Risk & Control Self-Assessments (RCSA) and audit processes.

Aufgaben

• Assess current control designs and identify deficiencies.
• Define structured remediation plans and drive their delivery.
• Provide constructive challenge and support control improvements.

Kenntnisse

Analytical capability in control assessment

Stakeholder management

Written communication skills

Detail-oriented

Jobbeschreibung

Technology Consultant (Resilience, PAM & IAM)

Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness.

Contract with strong chance of extensions

Location - London

On-Prem 4 days per week

This role will play a central part in enhancing controls related to:

• Operational Resilience
• Privileged Access Management (PAM)
• Identity & Access Management (IAM)

You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard.

Key Responsibilities

Control Assessment & Diagnosis

• Review underperforming controls to identify:
  • Root causes
  • Design deficiencies
  • Operating effectiveness gaps
• Assess whether current control designs are fit for purpose and aligned with regulatory expectations

Remediation Planning & Execution

• Define structured remediation plans, including:
  • Actions
  • Ownership
  • Milestones
  • Evidence requirements
• Drive delivery of remediation activities in collaboration with control owners and SMEs

Stakeholder Engagement

• Partner with:
  • Technology and engineering teams
  • Risk & compliance functions
  • Internal audit and assurance stakeholders
• Provide constructive challenge to ensure robust and sustainable control improvements
• Support optimisation of control operating models, including:
  • Control frequency
  • Evidence standards
  • Accountability models
  • Governance processes
• Embed consistent control discipline across resilience, PAM, and IAM domains

Governance & Reporting

• Track remediation progress and proactively escalate:
  • Risks
  • Blockers
  • Overdue actions
• Produce clear, concise reporting for:
  • Senior stakeholders
  • Governance forums
• Review remediation evidence to confirm completeness and sustainability

Audit & Assurance Readiness

• Support preparation for:
  • Control testing
  • Internal/external audit
  • Regulatory reviews
• Ensure remediation outcomes are defensible and audit-ready
• Proven experience in one or more of the following:
  • Technology Risk / IT Controls
  • Cyber Risk
  • IT Audit
  • Operational Resilience
• Strong track record delivering control remediation in:
  • Financial services
  • Banking
  • Regulated environments
• Experience assessing:
  • Control design effectiveness
  • Operating effectiveness
• Familiarity with:
  • Risk & Control Self-Assessments (RCSA)
  • Audit findings and issue management
  • Assurance and regulatory reviews
• Demonstrated ability to manage remediation lifecycle from identification through to closure

Operational Resilience

• Understanding of:
  • Critical business services
  • Disaster recovery & business continuity
  • Technology recovery controls
• Experience with:
  • Resilience testing evidence
  • Impact tolerances
  • Recovery plans & continuity procedures

Privileged Access Management (PAM)

• Knowledge of:
  • Privileged account governance
  • Joiner-Mover-Leaver processes
  • Access recertification and reviews
• Exposure to:
  • PAM tooling (e.g. vaulting solutions)
  • Break-glass access
  • Session monitoring
  • Privileged account ownership models

Identity & Access Management (IAM)

• Experience with:
  • Access provisioning & de-provisioning
  • Role-based access controls (RBAC)
  • Segregation of duties (SoD)
• Strong understanding of:
  • Access reviews and governance
  • IAM control testing
  • Leaver controls

Key Skills & Attributes

• Strong analytical capability in control assessment and remediation design
• Ability to translate complex control issues into practical, actionable solutions
• Excellent stakeholder management across technical and non-technical audiences
• High-quality written communication, including senior-level reporting
• Confident in constructively challenging control owners
• Comfortable operating in ambiguous, fast-paced environments
• Strong attention to detail, particularly in reviewing remediation evidence