Job Description
We're looking for a Risk & Controls Specialist to join our Risk team on a 6-month contract.
n
Sydney ONLY
n
This role will focus on second-line technology controls testing, with particular emphasis on ITGCs, IAM/access management, change management and IT operations controls.
n
Duties
n
Deliver 2nd line IT controls testing across ITGC and security controls.
n
Test access management, change management and IT operations controls.
n
Assess control design and operating effectiveness and challenge management where required.
n
Perform testing aligned to NIST security domains and relevant technology risk frameworks.
n
Document test procedures, evidence, results and issues in line with governance standards.
n
Support business and finance controls testing and audit requests.
n
Work with Technology, Information Security, Risk, Compliance and Audit stakeholders.
n
Provide control and policy interpretation and support remediation activities.
n




Contribute to risk governance activities and continuous improvement.
n
Profile
n
2-3 years' Big Four IT audit or controls testing experience
n
Hands-on experience testing IT general controls and security controls
n
Knowledge of frameworks such as NIST, COBIT or ISO *****
n
Experience in financial services/insurance and APRA controls is desirable
n
Strong documentation, stakeholder management and communication skills
n
This is a outstanding opportunity for someone with solid controls testing experience who can work independently and deliver high-quality testing outcomes.
n
Technical Experience
n
Experience across the following areas is preferred / Cloud security governance (Azure/AWS) / Third-party assurance and controls testing. / Data governance / Automated controls testing.
n
MUST have PR/Citizenship OR Visa with no sponsorship requirements for a year.

📌 It Risk & Controls Specialist (Contractor) (New South Wales)
🏢 Ethos BeathChapman
📍 New South Wales