WHAT YOU NEED TO KNOW AND SHOW

Essential Criteria

• Demonstrate ability to work collaboratively with a range of business stakeholders
• Ability to think methodically and logically; and communicate using spoken and written word

Additional Criteria

• Be able to proactively identify and own any issues and follows through to resolve them
• Critical thinking skills, ability to evaluate evidence and how it applies to controls
• Ability to prioritise their own workload and deliver quality results on time to budget
• Certifications such as CISA are desirable but not essential

WHAT YOU NEED TO DO

• Conduct IS and IT Controls testing, including design and operating effectiveness testing
• Drive the assessment of IS and IT control effectiveness across the business and raising appropriate risks
• Provide policy compliance of IS and IT controls across the business
• Drive the compliance programme and produce reporting for the audit committee
• Assist in IS & IT risk management and facilitate reviews of controls
• Produce reporting on identified compliance gaps and remediation activities
• Drive the adoption of appropriate process documentation and controls
• Support the creation of internal security compliance framework and policy
• Familiar with IS and IT controls such as NIST-CSF, ITGC and ITACs, and other relevant frameworks and regulations