IT Risk & Controls Consultant

Develop, facilitate and monitor effective risk, control and audit activities across the IT division. Provide consultative support and advise IT managers and IT control owners on effective management of risks and issues, control reviews and audits to ensure the 1^st line of defence is effectively influenced across the whole of the division.

Accountabilities

1

Identify, propose and facilitate the development and implementation of appropriate IT controls to mitigate risks and issues, ensuring that recommended actions are in alignment with the Group IT strategy and within organisational risk appetite.

2

Investigate, challenge, negotiate and advise IT stakeholders on the approach to IT risk, issue, audit and control management in line with Group policies and procedures, the IT division framework and industry standards and regulatory requirements.

3

Proactively develop, monitor and deliver an IT control improvement plan which complements NFUM’s Operational Risk Management Framework and delivers continuous improvements in line with IT divisional strategy and industry best practice.

4

Develop and create regular reporting solutions on the overall IT division risk, issue, control and audit position for IT senior managers and bespoke solutions for specific business area requirements.

5

Complete regular internal self audits within the IT division to ensure risk and control management activities are being maintained to agreed standards.

6

Collate, interpret and present the IT division risk oversight position and plan and prepare documentation for the IT Divisional Risk and Issues Committee meetings in order to ensure a good understanding of relevant matters that enable the committee to make effective decisions.

7

Proactively co-ordinate and communicate with key internal stakeholders in corporate governance functions and other internal departments to ensure that IT division consistently executes its responsibilities on 1st line of defence in accordance with best practice and IT professional standards.

8

Deliver short term / one-off projects and activities as required by and to the standards and outcomes agreed with Line Manager.

Qualifications

· Degree or suitable professional qualification (e.g. CRISC)

· Information Technology Infrastructure Library (ITIL) qualification at Intermediate level or working towards.

· Control Objectives for Information and related Technology (COBIT) v4.1 or working towards.

· Prince2 Project Management Practitioner desirable.

Experience and Knowledge

· Knowledge of control frameworks and relevant best practice

· Experience of performing risk and control based reviews

· Excellent relationship building and influencing skills

· Proven experience of analytical work in a Governance, Risk management and/or similar Assurance function

· Good knowledge of project management and planning processes and techniques