• Evaluate IT controls for design and effectiveness;
• Initiate and facilitate IT risk assessments in line with internal frameworks, procedures and guidelines;
• Provide guidance and expertise to Dev Ops Teams in IT Risk Managements related activities;
• Monitors and reports progress on identified issues/risks;
• Act and advise on IT issues (e.g. IT Audit points);
• Contribute to the local IT security policies, procedures, guidelines and runbooks in line with internal policies and industry best practices;
• Liaison between 1 line of defense and 2nd/3rd lines of defense;
• Provide training & awareness activities on IT Risk topics;
• Perform relevant reporting where required (e.g. to management team, application owners, IT Custodians);
• Contribute to the local projects.

• 3-5 years (preferably in software company or financial institution) in an IT Auditor, IT Risk Officer, IT Compliance Specialist, IT Security Officer or similar role;
• Familiar with ISO/IEC 27000 family of standards, COBIT, NIST, CIS and similar frameworks;
• Understand various technologies (e.g. operating systems, databases, virtualization, cloud) and SDLC;
• Nice to have relevant trainings and certifications (e.g. CISA, CRISC, CISM, CISSP, CEH, ISO27001);
• Fluency in English (written and oral).