Job Description
Must Have:
Current/Recent Banking experience
Hands-on Application testing experience
One or MORE of the following certifications
CISA, CRISC, CISM, CISSP, ITIL, COBIT
Hands-on, with the ability to PERFORM and LEAD a small team for Level 1 and Level 2 control application validation testing
Strong communication
US Natural Citizen considered first and among all candidates.
Lead role for a small team, so they MUST have recent hands-on experience.
We are seeking an experienced Technology Risk & Compliance Consultant to lead and execute technology risk, compliance, and control validation activities across critical financial applications. This role requires a strong leader who is also highly hands-on, with the ability to perform detailed testing and validations while driving risk initiatives from assessment through production implementation.
Key Responsibilities:
- Perform and oversee Level 1 and Level 2 control validations, ensuring technology controls are appropriately designed, implemented, and operating effectively.
- Lead technology risk and compliance initiatives while remaining hands-on with execution, testing, documentation, and remediation activities.
- Head up the technology risk process for financial applications moving into production, ensuring required controls, testing, approvals, and documentation are completed prior to deployment.
- Manage and validate change control processes, including risk assessments, approvals, testing evidence, implementation plans, and post-production validation.
- Establish and maintain technology risk and compliance procedures, standards, and documentation.
- Help drive continuous improvement and automation of risk, control validation, and testing processes.
Required Qualifications:
- 7+ years of experience in Technology Risk, IT Risk, IT Compliance, Technology Controls, IT Audit, or a related discipline.
- Proven experience leading technology risk initiatives while remaining hands-on with control testing and validation.
- Strong experience with Level 1 and Level 2 validations and technology control frameworks.
- Experience with financial applications, preferably within banking, financial services, or other highly regulated environments.
- Strong understanding of change management/change control, SDLC controls, application testing, and production implementation processes.
- Experience developing, executing, and documenting technology and control testing.
- Ability to identify risks, challenge existing controls, and drive remediation through completion.
- Strong understanding of technology governance, risk, and compliance principles.
- Excellent communication skills with the ability to work with both technical teams and senior leadership.
Preferred Certifications:
One or more of the following certifications is preferred:
CISA – Certified Information Systems Auditor
CRISC – Certified in Risk and Information Systems Control
CISM – Certified Information Security Manager
CISSP – Certified Information Systems Security Professional
ITIL certification
COBIT or related governance/control certification