IT GOVERNANCE, RISK AND COMPLIANCE SPECIALISTAs an IT Governance, Risk and Compliance Specialist, you will play a pivotal role in assessing and documenting our client's compliance and risk posture relating to its information assets. Your day-to-day responsibilities will include implementing security controls, evaluating risks, developing standards, automating processes for continuous monitoring of information security controls, among others. You will also be responsible for maintaining various types of risk assessments while reporting any control failures or gaps to management. Your role will extend beyond these tasks as you assist other staff members with the management of security program functions while also acting as a resource on security assessment functions for other business units.
What you'll do: Implement security controls, risk assessment framework, and assurance program aligning to regulatory requirements.Evaluate security risks and controls, develop security standards and procedures to manage risks.Implement processes such as GRC (governance, risk and compliance) to automate and monitor information security controls.Define and document business process responsibilities and ownership of the controls in GRC tool.Perform internal and external information security risk assessments.Maintain Risk Assessments, Third-party Risk Assessments and Privacy Impact Assessments.Document and report control failures and gaps to management.Assist other staff in the management and oversight of security program functions.Train, guide, and act as a resource on security assessment functions to other business units.Remain current on best practices and technological advancements.What you bring: Formal qualifications in Business Management, Information Technology Management or related field.Relevant experience in implementing, managing, reviewing internal security controls for governance.Track record of performing internal or external audits (financial/operational/IT) in accordance with relevant professional standards.Highly proficient in audit methodologies applicable in IT environments.Expertise in designing and implementing compliance and control frameworks including business process re-engineering.Expert knowledge of IT governance quality and security standards.Experience writing high-quality documentation and reports.Excellent comprehension of internal controls requirements and implications.What sets this company apart: Our client is a renowned organisation that provides technology services and solutions that advance their vision, mission, and strategic goals. They support their users, leadership, external stakeholders, and practitioners with customer-oriented service and a robust and reliable technology environment that encourages effective and innovative ways of using technology in all facets of their operations. They value collaboration, commitment, interpersonal skills, and offer flexible working opportunities.
Aboriginal and Torres Strait Islander Peoples are encouraged to apply. To apply please click apply or call Anthony Buccat on +61 3 8628 2261 for a confidential discussion.
About the job Contract Type: FULL_TIME
Specialism: Information Technology
Focus: IT Audit
Salary: AUD130,000 - AUD140,000 per annum
Workplace Type: Hybrid
Experience Level: Associate
Location: Melbourne
Job Reference: 2004870/001
Date posted: 12 September 2024
Consultant: Anthony Buccat
#J-18808-Ljbffr
