IT Risk SME (First Line of Defense - 1LoD)

IT Risk SME (First Line of Defense - 1LoD)

As a preferred supplier to one of our biggest Financial Client, I am seeking for an IT Risk SME for a position in Amsterdam, Netherlands. The successful candidate will help to manage and reduce the organization’s information risks through continuous management & reporting related to the IT Risk & Control Framework.

You act as a professional who is specialized in identifying, assessing, and mitigating risks associated with information technology systems and infrastructure.

You will fulfil a 1LoD QA Control role, help improve our IT Audit processes and IT R&C Framework (and processes), and ensure compliance with laws and regulations.

You do this all in close collaboration with IT Risk SME's in NL and in the other regions (AP and US), colleagues in IT, Risk Management (2LoD), and suppliers.

Responsibilities:

• Provide 1LoD IT Audit guidance within the IT Control & Service Management team across all aspects of the IT landscape, inclusive of Client and Third-Party questionnaires.

• Organizes and controls follow-up on assessments.

• Document IT Audit & questionnaires processes.

• Continuously manage, maintain and monitor on the IT R&C Framework.

• Prepare, coordinate, execute, and document 1LoD workshops and supporting evidence referred to above-mentioned OSI findings.

• Related to the OSI findings, 1LoD risk-related processes must be designed, documented, and implemented.

• Liaise with the IT CoE (Center of Excellence), and 2LoD on key issues and projects.

• Executes various risk assessments and analyzes the data, presents the results and conclusions to management. Research deviations and advises about risk mitigating actions.

• Responsible for management reporting on IT Audits, questionnaires and the IT R&C Framework to senior stakeholders for any needed improvements and will advise on the development and implementation of changes in standards and procedures.

• Educating employees on IT Risk management best practices.

• Reviews and revises IT procedures and makes recommendations for their implementation.

• Collaboration and cooperation with IT teams and individuals across the globe on various IT Risk (process) related initiatives, projects and tasks.

Requirements:

• Bachelor’s / Master’s degree or equivalent degree/experience.

• 7+ years of working experience in an IT or Compliance environment.

• Minimum of 5 years of IT Risk experience, working with both internal and external IT Risk & Control and Audit teams.

• Certifications required (at least one of below or similar):

  • CISA (Certified Information Systems Auditor)

  • RE (Register EDP-Auditor)

  • ISO 27001 Lead Auditor

  • CRISC or CGEIT

• Certifications preferred:

  • CISM

  • CISSP

• Experience working in a regulated and/or financial and/or IT industry preferred

• Knowledge of Audit Lifecycle.

• Knowledge of IT Risk, NIST, COBIT, ITIL frameworks (knowledge and experience with NIST highly preferred).

• Familiarity of IT best practices, particularly in the financial services industry.

• Knowledge of information management and of IT systems, processes, and regulations.

• Ability to effectively communicate with all levels of an organization, including senior management/stakeholders.

• Familiarity with Atlassian Products (Jira, Confluence), AGRC and/or ServiceNow a plus.

Contract: 6+ month

Rates: Excellent

Location: Amsterdam

Hours: 36 hours a week

Interview: 2 stages

Nick Chinweerapunt

Account Manager

Gazelle Global Consulting