IT Internal Control Lead

Controls Testing & Risk Assessment

• Conduct controls testing in areas such as Incident Management, Disaster Recovery, Cryptography, Network Security, and Identity & Access Management.
• Perform periodic reviews of new and existing controls from a design and effectiveness perspective.
• Evaluate IT and Cybersecurity controls to ensure they mitigate associated risks accurately, completely, and transparently.
• Take ownership of the testing progress for assigned controls and communicate updates to senior stakeholders.
• Assess IT & Cyber risks and the effectiveness of related controls to ensure alignment with management's risk tolerance.
• Lead Risk and Control Assessments (RCA) for various accounts by performing risk evaluations, control design validation, and assurance activities.
• Analyze security impacts of technology or business changes.
• Proactively investigate and perform root cause analysis on risk events.
• Maintain and update control master data for changes in systems and business processes.
• Collaborate with control owners to address ineffective controls and coordinate remediation tracking.
• Oversee attestation and certification processes.
• Act as a subject matter expert on function-specific risks, control objectives, and controls.
• Serve as Local RACE/Tickit expert within the team.

Audit & Compliance

• Lead all internal and external audits related to the account.
• Ensure data integrity, quality, and completeness in independence systems involving client and related party data.
• Support engagement teams in ensuring compliance with firm independence policies.
• Ensure that risk management framework components are implemented and functioning effectively across all accounts.

Customer Focus

• Use customer insights to shape business strategies and security initiatives.
• Implement and advocate best practices in customer experience and data handling.
• Deliver excellent service to both internal and external stakeholders in line with SLA, compliance, and regulatory standards.
• Ensure strict confidentiality of all client and partner data per established protocols.
• Maintain strong and professional customer relationship management practices.

Communication & Collaboration

• Maintain high standards of communication in all stakeholder interactions.
• Provide regular reporting and progress updates to key stakeholders.
• Ensure all messaging aligns with the organization's brand promise and governance standards.