Manager, Information Security, Data Risk Management and Internal Audit

Actively support business development and project execution for Risk Consulting services with assignments relating to information security and data risk management, including but not limited to:

• Internal audit on ITGC/ITAC and key IT processes

• Risk assessment and responses on IT security, information security

• ISMS framework development and implementation, in lines with standards such as NIST, COBIT, ISO27001

• Business Continuity Management, in lines with ISO 22301

• D&A and AI/ML governance and risk management

• Trainings on information security and data risk

Work closely with risk professionals across Risk Consulting practices to provide the technology enablement supports for risk function transformation, including but not limited to development of BRD and oversight on implementation for systems and/or tools that facilitate risk functioning such as e-GRC, early warning and indicators monitoring, KYC/screening, transaction monitoring, investigations, data privacy management, ESG reporting and emission accounting.

Supervise and review the work of other team members, providing coaching and support, and managing their technical performance.

• Solid experience in technical aspects of data security, internal controls, information security, IT risk management and internal audits

• Familiar with leading practices and standards relating to information security and data risk

• Good teamwork and communication skills to establish and maintain business relationships

• Knowledge of how to create proposals and present effectively

• Logical thinking and efficient handling of workload.

Skills preferred:

• A minimum of 5 years of hands-on experience in internal audits (focusing IT internal audit is preferable), IS/IT security reviews and data risk management

• A bachelor’s or master’s degree in IT

• CISA is required

• One or more of the following certifications will be an advantage: CCNA, CISSP, CEH, CISM, CRISC, ITIL, Certified ISO27001 Lead Auditor, PMP.

• Good knowledge on leading practices and standards

• Extra experience in BCM, AI/ML governance, e-GRC and risk technology are advantages