We are seeking an experienced Risk & Controls Specialist (Contractor) to support technology risk and controls assurance activities within a leading financial services organisation. This role will focus on the independent assessment and testing of technology controls, including IT General Controls (ITGCs) , security controls, and controls supporting internal financial reporting requirements.

Key Responsibilities

- Plan and execute IT General Controls (ITGCs) and security controls testing activities.
- Assess the design and operating effectiveness of technology controls.
- Perform controls testing aligned to frameworks including NIST CSF , COBIT 2019 and ISO 27001 .
- Review and challenge control documentation, processes and remediation activities.
- Prepare clear testing documentation, evidence and reporting outcomes.
- Support internal and external audit activities.
- Provide guidance and advice on technology risk, controls and policy requirements.
- Contribute to governance activities and continuous improvement initiatives.

Profile

- You are a technology risk and controls professional with experience in IT audit,



information security and controls assurance.
- 3–4 years’ experience in technology risk, audit, controls governance or assurance.
- Solid experience in IT General Controls and security controls testing.
- Knowledge of technology risk and security frameworks, including NIST CSF, COBIT 2019 and ISO 27001.
- Experience working with regulatory frameworks such as APRA CPS 234, CPS 230, CPS 235 or equivalent.
- Understanding of access management, change management, IT operations and technology control environments.
- Experience within financial services or insurance environments is highly regarded.
- A degree in business, technology or a related discipline is required. Certifications such as CISA, CRISC or similar are desirable.

Technical Experience

- Experience across the following areas is preferred
- Cloud security governance (Azure/AWS)
- Third-party assurance and controls testing
- Data governance
- Automated controls testing

#J-18808-Ljbffr

📌 IT Risk & Controls Specialist (Contractor) (City of Sydney)
🏢 Ethos BeathChapman
📍 City of Sydney