IT Risk and Control Audit Specialist

About the role

The IT Risk and Control Audit Specialist will evaluate risks within the IT environment, enhance surveillance processes, and manage control routines to ensure compliance with internal policies. This role collaborates closely with Internal Audit, Enterprise Risk Management, and various IT stakeholders to safeguard the organization’s technology assets.

Key responsibilities

• Administer the technological risk cycle: identify, assess, and monitor inherent risks and controls.
• Conduct process reviews to evaluate operational controls and key risk indicators.
• Partner with Internal Audit for annual IT reviews and manage external audit deliverables.
• Lead access review campaigns to ensure compliance with critical controls.
• Document risk workflows for processes and new projects requiring controls.
• Support creation and maintenance of the IT Risk and Control Matrix.
• Assist in implementing new technologies and assess project adherence to internal controls.
• Monitor key controls defined in the Risk, Activity, Control, and Monitoring matrix.
• Develop new control frameworks for the IT department and evaluate emerging risks.
• Collaborate with Business Continuity, Enterprise Risk Management, and Internal Controls teams.

Required profile

• Bachelor’s degree preferred; relevant experience may substitute.
• Ability to work independently and as part of a team.
• Excellent organizational skills with strong attention to detail.
• Strong problem‑solving and decision‑making abilities.
• Flexibility and adaptability to changing priorities.
• Knowledge of industry trends and best practices.
• Willingness to learn and stay updated on new developments.

Required skills

• Scrum certification or experience.
• ISO framework knowledge.
• COBIT framework knowledge.
• ITIL framework knowledge.