technical teams to ensure security controls are implemented and effective Assist in preparing for and responding to regulatory audits and compliance reviews (e.g., NIST CSF, ISO 27001, DORA, GDPR. ITGC) Maintain and update the information security risk register with appropriate scenarios and control frameworks Conduct regular control testing, evaluation and reporting findings to stakeholders Stay current on changes in regulations More ❯
Hounslow, England, United Kingdom Scalian Hounslow, England, United Kingdom Direct message the job poster from Scalian Information Security | GRC | CISA | CISM | PCI-DSS | COBIT | ITIL | SOx | NIST | ISO 27001 | ITGC | ERM | Breaking into White Hat from Grey Hat Purpose: The Service Reliability Engineer combines excellent software engineering, IT operations skills and database expertise. This allows them to accelerate our software More ❯
systems implementations, or Information Security Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams Strong technical skills and a working knowledge of SOX ITGeneralControls, COSO, SOC 1, and SOC 2 Awareness of ISO 27001, NIST standards, HIPAA, FAIR, and other relevant standards Effective analytical and critical thinking abilities Entrepreneurial nature, self-motivated, ethical More ❯
systems implementations, or Information Security; Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams; Strong technical skills and a working knowledge of SOX ITGeneralControls, COSO, SOC 1, and SOC 2; Awareness of ISO 27001, NIST standards, HIPAA, FAIR, and other relevant standards; Effective analytical and critical thinking abilities; Entrepreneurial nature, self-motivated, ethical More ❯
General Manager Information Technology jobs in London Area, United Kingdom . General Manager/Director Of Operations - Engineering Kent, England, United Kingdom 2 weeks ago Senior Manager - International ITGeneralControls GM of Payment Operations & Shipping (Senior Director) London, England, United Kingdom 1 month ago We’re unlocking community knowledge in a new way. Experts add insights directly into each More ❯
management industries and beyond. Our key offerings are internal audit (outsource and co-source) finance and risk management, compliance and technology. Joining the Agile Talent Community as an Interim ITGC Internal Auditor, you will have the freedom to work on projects that you choose, whether full or part-time within FS BRS and support our clients and internal teams on … short to medium-term assignments. Skills we are looking for Experience of delivering ITGC audit work including reviews of work papers, writing high quality reports, managing and clearing work with stakeholders, gained within the Banking sector. Excellent knowledge of web proxy technology, ideally Bluecoat, ZScalar and/or ZIA proxies. Experience of managing audit teams would be highly beneficial. What More ❯
management industries and beyond. Our key offerings are internal audit (outsource and co-source) finance and risk management, compliance and technology. Joining the Agile Talent Community as an Interim ITGC Internal Auditor, you will have the freedom to work on projects that you choose, whether full or part-time within FS BRS and support our clients and internal teams on … short to medium-term assignments. Skills we are looking for Experience of delivering ITGC audit work including reviews of work papers, writing high quality reports, managing and clearing work with stakeholders, gained within the Banking sector. Excellent knowledge of web proxy technology, ideally Bluecoat, ZScalar and/or ZIA proxies. Experience of managing audit teams would be highly beneficial. What More ❯
Governance function. Successful candidates will enjoy a broad remit, as they assist in the maintenance and enhancement of the Company’s Data Governance, Data Protection, Market Data control, ITGeneralControls, Operational Resilience (including Business Continuity) and Third Party Management methodologies. The role reports to Technology Governance Lead Analyst. There will also be additional opportunities to partner closely with the … and external audits; ensuring that action points are resolved and closed appropriately. Provide access control related audit and project updates to relevant senior stakeholders as and when appropriate. ITGeneralControls: To take ownership of delivery and completion of cyclical access control reviews across the business. Including internal and externally hosted applications, physical security reports, market data access permissions, and More ❯
London, England, United Kingdom Hybrid / WFH Options
AXA UK
involves identifying and assessing risks across all aspects of RSAL’s IT, tracking and reporting key risks to senior management, and supporting groupwide control validation, including compliance with ITgeneralcontrols such as Canadian NI 52-109. Additionally, your role involves monitoring regulatory requirements across RSAL’s operating geographies to ensure compliance with relevant IT regulations. The Head of More ❯
Lead the programme on timely updating and upskilling of Risk control Matrix making sure the control description and relevant data fields are up to date. Work closely with the ITGC CoE to drive improvements in both the efficiency and effectiveness of the Company's SOX programme to increase the level of automated and preventive controls. Lead SOX scoping and risk More ❯
London, England, United Kingdom Hybrid / WFH Options
Blackfield Associates
of global transformation programs and large-scale change management. Ability to manage diverse, geographically dispersed teams and foster collaboration in cross-disciplinary environments. Experience with structured systems methodologies, ITgeneralcontrols frameworks, and developing site cutover plans. What They Offer This role comes with a competitive compensation package and comprehensive benefits, including: 25 days of holiday leave. A performance-based More ❯
Who we are United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning More ❯
City of London, London, United Kingdom Hybrid / WFH Options
SMBC Group
Who we are United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning More ❯
South East London, England, United Kingdom Hybrid / WFH Options
SMBC Group
Who we are United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth agenda and award-winning products, meaning More ❯
London, England, United Kingdom Hybrid / WFH Options
SMBC Group
1 day ago Be among the first 25 applicants United by a sense of purpose towards our customers – to be a trusted partner for the long-term – and our universal banking platform in EMEA, SMBC Group has an international growth More ❯
to enable JM to make appropriate decisions regarding its third-party risk profile. Developing, maintaining and operating cyber and ITcontrols assurance processes, including being responsible for the JM ITGC framework and ensuring system owners understand their responsibilities. Conduct thorough assessments of control environments, systems, processes, and practices to identify control gaps, including those associated with audit actions, customer and … audits Technical and/or practical experience of: Cyber security controls/capabilities and relevant standards e.g. ISO27001 ITcontrols implementation and assurance, including but not limited to ITgeneralcontrols Enterprise software capabilities and technologies, including but not limited to ERP, CRM, enterprise operating systems (e.g. Windows/Linux) Relevant legislation such as NIS2, GDPR and Computer Misuse Act More ❯
professional certifications (CISA, CISM, or CISSP) with a strong background in IT audit Experience in fast-moving, high-growth environments—M&A exposure is a plus Expertise in ITgeneralcontrols, risk frameworks, and internal audit best practices Excellent communication skills, with the ability to translate complex technical concepts for diverse stakeholders A flexible and strategic mindset, ready to thrive More ❯
Standards Management: working with Policy owners to manage updates to policies, standards, processes, and controls within the Enterprise Risk Management Framework (ERMF). • Controls Catalogue Management: Oversee the ITGeneralControls catalogue, ensuring it is comprehensive and up-to-date. • Audit Relationship Management: Manage relationships with internal and external auditors, coordinating with stakeholders to provide necessary evidence. • Audit Findings Management More ❯
Management; Physical operational resilience. Data - Rest and Transit Protection, Loss Prevention, Access, Accuracy and Completeness, Retention and Disposal. Financial Control Framework (FCF) - User Access Management (non-IBS apps); other ITGC areas covered by bullets above e.g., change management. Fifty-five (55) prioritized key controls are to be tested in H2 2025, across scoped-in Functions and Divisions across L&G. More ❯
is currently hiring for X2 Junior Analysts to join the Technology Governance function. Successful candidates will assist in maintaining and enhancing Data Governance, Data Protection, Market Data control, ITGeneralControls, Operational Resilience (including Business Continuity), and Third Party Management methodologies. The role reports to the Technology Governance Lead Analyst. There will be opportunities to work closely with the Head … frameworks. Oversee data protection functions for compliance. Data Governance Framework: Maintain and define data ownership, classification, and stewardship. Report to the Data Governance Committee and support audit processes. ITGeneralControls: Manage access control reviews and policies. Identify and remediate access risks. Provide MI reports to stakeholders. Reporting: Support external and internal reporting obligations. Report on Data Protection and Technology More ❯
deficiency evaluation methodologies. In-depth experience in the review of SOC-1 Type II reports and relevant CUEC mapping, including sub-service organizations. Working proficiency and understanding of ITGeneralControls, SEC guidance as it pertains to the SOX requirements for different filer types, PCAOB, and AICPA audit standards. Education and Experience Requirements: 5+ years of direct, client service/ More ❯
and automated testing frameworks. A strong grasp of Derivatives products, market structures, and quantitative modelling. Experience designing and delivering enterprise-level trading solutions, with a strong understanding of ITGeneralControls and enterprise data governance. Hands-on experience working in Agile delivery environments (Scrum, Sprints, Releases). Excellent communication skills with the ability to interact with stakeholders at all levels More ❯
NetSuite Administrator to manage the day to day administration and maintenance of the several Finance systems, including NetSuite, Rossum and Pleo What you'll do Handling system administration and ITGC responsibilities; Providing first-line user support, escalating issues as needed; Investigating and resolving technical issues across multiple finance systems, including system interface/integration issues; Ensuring financial and system controlsMore ❯
overall business effectiveness of the Risk and Compliance function. Key Responsibilities: Ensure compliance with IT regulations, standards, and policies, including ISO 27001, NIS2, and DORA. Implement and maintain ITGeneralControls to protect digital assets. Monitor and report compliance status and issues to senior management. Coordinate IT activities for internal and external audits, including finance and ISO 27001 audits. Standardise … Competencies/Qualifications: Extensive experience leading IT risk management and compliance within a complex global organisation. Strong knowledge of IT regulations, standards, and best practices. Strong knowledge of ITGeneralControls and Information Security Management Systems. Experience with regulatory requirements and standards, including ITIL, GDPR, ISO27001, PCI, NIS2, and DORA. Proven ability to manage and coordinate audit activities. Ideally have More ❯
deficiency evaluation methodologies. In-depth experience in the review of SOC-1 Type II reports and relevant CUEC mapping, including sub-service organizations. Working proficiency and understanding of ITGeneralControls, SEC guidance as it pertains to the SOX requirements for different filer types, PCAOB, and AICPA audit standards. People Development: Leads by example. Provides constructive, in-the-moment feedback More ❯