IT OPC Control Analyst

About the Role

The ISPL Conduct & Control team is primarily responsible for proactive management of Operational Risks through a robust control framework, which aids in effective monitoring & reporting of risks. This role provides both the Business Units and IT Management with the assurance and visibility that IT Controls are executed in a controlled and managed way.

Key Responsibilities

• Conduct periodic controls assessments across process areas in scope.
• Raise any non-compliance and follow up of the corrective actions until closure.
• Liaise with global and local IT control areas to ensure their certification is timely and appropriate.
• Perform periodic Root Cause Analysis of process issues and non-compliances at Project and Application Domain level.
• Ensure that the exercise is planned, executed effectively and reported to appropriate level.
• Participate in minimising production risks and issues, including helping to devise, and by implementing, sufficient regular controls.
• Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
• Enforce Permanent Controls, providing ongoing risk & controls self-assessment status of the control environment.
• Contribute all relevant management information (KPIs/KRIs) to the various scope reports/dashboards.
• Assist with Historical Incident management process, including liaising with various stakeholders, root cause analysis and impact evaluation.
• Contribute to the upkeep and maintenance of the ISPL Permanent Control Framework.
• Maintain relevant Operational Permanent Control (OPC IT) processes and procedures.

Requirements & Tech Stack

• Good knowledge of IT Risk & Audit domain with focus on Internal and/or External Audits.
• Good understanding of IT Controls Framework and experience executing controls.
• Understanding of IT Software, IT Infrastructure and IT Service Management domain is a value add.
• Strong analysis & problem-solving skills.
• Structured and methodical mindset.
• Proactive approach with a strong ability to work on own initiative.
• Ownership of work and commitment to delivery.
• Team oriented (both local and global).
• Good interpersonal and communication skills.
• Big picture awareness – make relationships between tactical issues and strategic options.
• Client focused.
• Pragmatic and creative approach.

Qualifications

• IT Background
• Technology Risk & Controls
• IT Risk Framework and Standards
• ISO 27001 Certified
• Understanding of key regulations
• Attention to Detail/rigor
• Communication skills – Oral & Written
• Personal Impact / Ability to influence
• Critical thinking
• Education Level: Bachelors / Masters