of frameworks such as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Designing solutions related to advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Develop knowledge base, re-usable components for GRC advisory services. • Responsible for development and enhancements of GRC services, team and delivery capabilities. More ❯
london (city of london), south east england, united kingdom
HCLTech
of frameworks such as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Designing solutions related to advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Develop knowledge base, re-usable components for GRC advisory services. • Responsible for development and enhancements of GRC services, team and delivery capabilities. More ❯
of frameworks such as NIST 800-53 r5, NIST CSF2.0, CIS, ISO27K • Designing solutions related to advisory & consulting engagements around regulatory risk & compliances such as DORA, NIS2, GDPR, SOX ITGC, PCI-DSS, HIPAA, Data Privacy, NHS, FFIEC etc. • Develop knowledge base, re-usable components for GRC advisory services. • Responsible for development and enhancements of GRC services, team and delivery capabilities. More ❯
Sunbury-On-Thames, London, United Kingdom Hybrid / WFH Options
BP Energy
to navigate the organisation with tact and manage relationships at different levels including senior leaders# Desirable Criteria: Audit experience including network and infrastructure security, payment card industry compliance, ITgeneralcontrols, cyber security and regulatory compliance Why join us? At bp, we support our people to grow in a diverse and exciting environment. We believe that our team is strengthened More ❯
framework development while building strong relationships across the business What They’re Looking For Background in IT Risk , Technology Risk , or Operational Risk within financial services Understanding of ITgeneralcontrols and exposure to cyber/information security Ability to spot weaknesses and recommend pragmatic solutions Excellent communicator who can build trust and influence senior stakeholders Experience with risk frameworks More ❯
london (city of london), south east england, united kingdom
Bonhill Partners
framework development while building strong relationships across the business What They’re Looking For Background in IT Risk , Technology Risk , or Operational Risk within financial services Understanding of ITgeneralcontrols and exposure to cyber/information security Ability to spot weaknesses and recommend pragmatic solutions Excellent communicator who can build trust and influence senior stakeholders Experience with risk frameworks More ❯
framework development while building strong relationships across the business What They’re Looking For Background in IT Risk , Technology Risk , or Operational Risk within financial services Understanding of ITgeneralcontrols and exposure to cyber/information security Ability to spot weaknesses and recommend pragmatic solutions Excellent communicator who can build trust and influence senior stakeholders Experience with risk frameworks More ❯
Wooburn Green, High Wycombe, Buckinghamshire, England, United Kingdom Hybrid / WFH Options
Costa Coffee
role remit. responsible for delivering and completing IT processes and controls to ensure sustained and continuous SOX compliance within the role remit, e.g. via the effective operation of ITgeneralcontrols for user permissions, privileged access, etc. responsible for measuring and reporting on Key Performance Indicators (KPIs) to evidence the stability, reliability and effectiveness of key systems and services within More ❯
deficiency evaluation methodologies. · In-depth experience in the review of SOC-1 Type II reports and relevant CUEC mapping, including sub-service organizations. · Working proficiency and understanding of ITGeneralControls, SEC guidance as it pertains to the SOX requirements for different filer types, PCAOB, and AICPA audit standards. People Development: · Leads by example. · Provides constructive, in-the-moment feedback More ❯
deficiency evaluation methodologies. · In-depth experience in the review of SOC-1 Type II reports and relevant CUEC mapping, including sub-service organizations. · Working proficiency and understanding of ITGeneralControls, SEC guidance as it pertains to the SOX requirements for different filer types, PCAOB, and AICPA audit standards. People Development: · Leads by example. · Provides constructive, in-the-moment feedback More ❯
ICFR, SOX, or SOC assurance programs, including leadership of testing or compliance functions. Proven experience designing and implementing ICFR/SOC testing frameworks from scratch. Strong ITgeneralcontrols (ITGC) and business process control testing experience. Prior external audit or assurance background (Big 4 or equivalent experience strongly preferred). Demonstrated success in rolling out SOC control programs and achieving More ❯
the Financial Services Business consulting team and support our clients and internal teams on short to medium-term assignments. Skills we are looking for Experience in ITgeneralcontrols (ITGC) implementation and support within Insurance sector Application controls and automation oversight Regulatory compliance and audit readiness Control deficiency remediation Risk management and mitigation Ability to bridge IT and risk functions More ❯
Stevenage, Hertfordshire, South East, United Kingdom
M Group
deliver essential infrastructure seamlessly across water, energy, transport and telecom. Want to come and be a part of it? What will you be doing? What youll bring Lead the ITGC Strategy define, implement, and continuously improve the organisations Information Technology GeneralControls framework in alignment with industry best practice, regulatory requirements, and internal governance. Oversee IT Governance & Compliance ensure systems … strong relationships with leadership, internal audit, risk teams, and business units to ensure alignment and transparency on IT control matters. Reporting & Metrics produce executive-level reports and dashboards on ITGC compliance status, control trends, and risk posture. Whats in it for you? We offer a range of benefits designed to support your life in and out of work, some of More ❯
minimum of over £50m+, ideally within a listed FTSE Business. Experience delivering IT Internal Audits. Essential. Planning and Delivery of IT Internal Audits. Strong understanding of ITGeneralControls (ITGC), for example: IT Risk and Governance, Identity and Access Management, IT Development, IT Change, and IT Disaster Recovery. Assistant Manager/Manager/Senior Manager Level. The minimum criteria you More ❯
minimum of over £50m+, ideally within a listed FTSE Business. Experience delivering IT Internal Audits. Essential. Planning and Delivery of IT Internal Audits. Strong understanding of ITGeneralControls (ITGC), for example: IT Risk and Governance, Identity and Access Management, IT Development, IT Change, and IT Disaster Recovery. Assistant Manager/Manager/Senior Manager Level. The minimum criteria you More ❯
london (city of london), south east england, united kingdom
Grant Thornton UK
minimum of over £50m+, ideally within a listed FTSE Business. Experience delivering IT Internal Audits. Essential. Planning and Delivery of IT Internal Audits. Strong understanding of ITGeneralControls (ITGC), for example: IT Risk and Governance, Identity and Access Management, IT Development, IT Change, and IT Disaster Recovery. Assistant Manager/Manager/Senior Manager Level. The minimum criteria you More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Huxley
and quality of control execution. The testing team will be required to support this transition over the next several years. Lead the Group's programme of ICFR testing (including ITGC) overseeing the planning and execution of control tests including the coordination with key stakeholders, managing the activities of control testing team in off-shore locations and building strong capability for … and accounting firm. Experience in running a large SOX testing programme in a complex multinational organisation would be desirable An understanding of IT systems and operation, experience in testing ITGC and IT Application controls would be an advantage including overseeing the complexity associated with deciding which systems/applications are in scope for testing. Info The role will be based More ❯