ITGC-Information Technology General Controls

Job Description:

1. Maintain awareness of the NFR Framework, work across the 3 Lines of Defense risk management model to ensure that risks are managed to within risk appetite and that where issues and incidents to occur their impact is minimized and managed appropriately through the timely update of books and records, ensuring the identification, assessment, and mitigation
2. Plan and lead fieldwork of control testing reviews to ensure timely delivery of the testing plan
3. Assess the design effectiveness, operational effectiveness and associated continuous monitoring plans
4. Providing expertise and guidance on control testing and applying critical judgment and decision making in relation to the identification and publication of control testing findings through identifying the key risks and issue
5. Partner with management to discuss, agree and assess control issues identified through testing activities and assist with establishing remediation plans
6. Supporting the preparation of testing reports to inform key stakeholders of the outcome of testing and review work       
7. Understand, follow, and demonstrate compliance with all relevant internal and external rules, regulations and procedures that apply to the conduct of the business in which the jobholder is involved, specifically Internal Controls and any supporting policies and procedures
8. In-scope controls would cover (illustrative but not complete) – Identity and Access Management, Change Management, Back-up and recovery, Incident and problem management, SDLC, Deployment Management, Vulnerability Management, IT Operations Management, IT Asset Management etc.