We're looking for a

Risk & Controls Specialist

to join our Risk team on a 6-month contract.

Sydney ONLY

This role will focus on

second-line technology controls testing , with particular emphasis on ITGCs, IAM/access management, change management and IT operations controls.

Duties Deliver

2nd line IT controls testing

across ITGC and security controls.

Test

access management, change management and IT operations

controls.

Assess

control design and operating effectiveness

and challenge management where required.

Perform testing aligned to

NIST security domains

and relevant technology risk frameworks.

Document

test procedures, evidence, results and issues

in line with governance standards.

Support

business and finance controls testing

and audit requests.

Work with Technology, Information Security, Risk, Compliance and Audit stakeholders.

Provide

control and policy interpretation

and support remediation activities.





Contribute to risk governance activities and continuous improvement.

Profile 2-3 years' Big Four IT audit or controls testing experience

Hands-on experience testing IT general controls and security controls

Knowledge of frameworks such as NIST, COBIT or ISO 27001

Experience in financial services/insurance and APRA controls is desirable

Strong documentation, stakeholder management and communication skills

This is a outstanding opportunity for someone with solid controls testing experience who can work independently and deliver high-quality testing outcomes.

Technical Experience Experience across the following areas is preferred / Cloud security governance (Azure/AWS) / Third-party assurance and controls testing. / Data governance / Automated controls testing.

MUST have PR/Citizenship OR Visa with no sponsorship requirements for a year.

#J-18808-Ljbffr

📌 IT Risk & Controls Specialist (Contractor) (Sydney)
🏢 Ethos BeathChapman
📍 Sydney