Freelance IT Risk & Audit Control (ZZP)

Job Overview

This role will help to manage and reduce the organization’s information risks through continuous management & reporting as relating to the NIST Framework. Additionally, this role will act as a supporting resource for the timely completion of Internal & External IT audit evidence requests, questions, and action items. The position is part of the IT Control & Service Management team (ITC&SM), which also liaises with global counterparts.

Job Responsibilities

•   Continuously manage, monitor, & report on the risk control framework detailed in the Information Security Governance Plan, specifically NIST & COBIT control frameworks.

•   Act as a supporting resource for both internal & external audits (audit management), gathering & presenting detailed operational evidence (control monitoring), while driving recommended audit action items through execution and closure (issue management).

•   Liaise with the IT CoE (Center of Excellence), and 2nd Line of Defense on key issues and projects.

•   Executes various risk assessments and analyzes the data, presents the results and conclusions to management. Researches deviations and advises about risk mitigating actions. Organizes and controls follow-up of assessments.

•   Responsible for management reporting for any needed security improvements and advises on the development and implementation of changes in standards and procedures.

•   Reviews and revises IT procedures and makes recommendations for their implementation.

•   Provide First Line of Defense IT Risk guidance within the IT Control & Service Management team across all aspects of the IT landscape; inclusive of Client and Third Party questionnaires.

•   Collaboration and cooperation with IT teams and individuals across the globe on various initiative, projects and tasks.

Relevant knowledge skills & competences:

•   Bachelor’s / Master’s degree or equivalent degree/experience

•   Minimum of 3 years of IT Audit experience, working with both internal and external audit teams. 

•   Certifications Preferred: Information Security Management qualifications such as CISM, CISA, CISSP, CRISC or CGEIT

•   Experience working in a regulated and/or financial and/or IT industry preferred