30308 Jobs

A career within Cyber Risk & Regulatory-Enterprise Risk & Controls Services, will provide an opportunity to gain an understanding of an organisation’s objectives, regulatory and risk management environment, and the diverse needs of their critical stakeholders. We focus on helping organisations look deeper and see further considering areas like culture and behaviours to help improve and embed controls. In short, we seek to address the right risks and ultimately add value to their organisation.

CIA, CPA or CISA

Demonstrates extensive abilities and/or a proven record of success providing services related to process and controls, risk assessment and controls testing methodologies across the 3 lines of defense, including IT management controls, IT general controls, IT dependencies, cyber-related risks and controls, which includes a proven record of success with facilitating and completing deliverables involving the following:
- Key domains of IT general controls, including data privacy and IT security, including change management, access to programs and data, computer operations, and systems development;
- Key components of IT dependencies, including segregation of duties, automated controls, key reports and interfaces;
- Current and emerging technologies which may include: Oracle, SAP, Oracle Database, web development tools, virtualization, UNIX, Linux, SQL, Cloud and security technologies, other automation & analytics; 
- Corporate Governance and Sarbanes Oxley (SOX) Act's regulations and requirements;
- Third Party Risk Management, including evaluation of third-party attestation reports (e.g. SOC 1), mapping to internal controls, and evaluation of complementary user entity controls; and,
- ITIL, COSO Framework, CoBIT and/or other leading business and IT control frameworks.Demonstrates extensive abilities and/or a proven record of success in risks and controls around financial reporting, compliance and operational processes within a professional services firm or large enterprise as a consultant, auditor or IT management controls, which includes a proven record of success with completing deliverables related to the following:
- Identifying key risks and controls, controls optimization, including the configuration of controls around, business process and within IT environments;
- Applying internal control principles and business/technical knowledge including IT general controls and application controls; 
- Leading the building and adaption of test programs and practice aids, as well as perform assessments, to evaluate controls, identify control issues and potential for remediation and optimization; and,
- Exhibiting project management skills; including monitoring workloads of the team while meeting client expectations. This includes providing candid, meaningful feedback in a timely manner and keeping leadership informed of progress.Demonstrates extensive abilities and/or a record of success in the following areas:
- Using available technical resources and tools to research and expand one's sphere of knowledge;
- Collaborating directly with clients, identifying and addressing client needs through building relationships with clients, understanding the client's business;
- Managing day-to-day engagement operations, including preparing concise, accurate documents and balancing project economics management with the occurrence of unanticipated issues;
- Demonstrating flexibility in prioritizing and completing tasks and communicating potential conflicts to leadership; and,
- Creating/reviewing high quality deliverables.