IT Risk And Control Specialist

Job Description

The IT Risk & Control Specialist is responsible for executing and supporting IT risk management, service management controls, operational resilience, and privacy governance activities. The role helps ensure effective monitoring of IT risks, controls, compliance requirements, and governance processes while supporting regulatory and organizational standards.

Key Responsibilities

IT Service Management Controls

• Monitor service level performance and compliance with agreed targets.
• Review and track service issues, breaches, and remediation activities.
• Monitor change requests, approvals, and change governance requirements.
• Support Change Advisory Board (CAB) activities and post-implementation reviews.
• Identify and escalate control gaps and process improvement opportunities.

IT Risk Assessment & Monitoring

• Conduct IT and information security risk assessments, business impact analyses, and control self-assessments.
• Support project, operational, and third-party risk monitoring activities.
• Monitor risk mitigation plans, key risk indicators (KRIs), and governance metrics.
• Maintain risk registers, documentation, and monitoring reports.
• Prepare risk assessment results, recommendations, and escalation reports.

Disaster Recovery & Business Continuity Support

• Support disaster recovery, contingency planning, and business continuity governance activities.
• Assist in continuity risk assessments, documentation reviews, and testing coordination.
• Monitor recovery plans, controls, testing results, and remediation activities.
• Track compliance with operational resilience and continuity requirements.
• Identify and escalate recovery and continuity gaps.

Privacy Governance & Data Protection

• Support privacy impact assessments and data privacy reviews.
• Monitor privacy controls, compliance requirements, and mitigation actions.
• Maintain privacy governance records and reporting requirements.
• Coordinate with stakeholders on data protection and privacy-related initiatives.

Governance Reporting & Coordination

• Prepare governance reports, dashboards, risk summaries, compliance updates, and presentation materials.
• Track and report key risk indicators and governance metrics.
• Coordinate with IT teams, auditors, vendors, and stakeholders on governance requirements.
• Support governance reviews, meetings, and compliance activities.

Continuous Improvement & Operational Support

• Support governance, risk management, and service management improvement initiatives.
• Participate in audits, compliance reviews, and governance assessments.
• Identify opportunities to improve processes, controls, and documentation.
• Provide general operational and governance support as required.

Qualifications

Education

• Bachelor's Degree in Information Technology, Computer Science, Information Systems, Business Administration, Engineering, or a related field.

Experience

• Minimum of 2 years of experience in IT Risk Management, IT Governance, IT Service Management, Compliance, Audit, Information Security, or related functions.
• Experience in IT risk assessments, governance reporting, audit support, operational risk monitoring, or service management controls.
• Experience in banking, financial services, or highly regulated industries is an advantage.

Required Skills & Knowledge

• IT Governance Frameworks (COBIT, ITIL, ISO Standards)
• IT Risk Management and Operational Risk Concepts
• Risk Assessment Methodologies (ITRA, ISRA, BIA, RCSA)
• Service Level Management and Change Control Processes
• Regulatory Compliance and Audit Coordination
• Disaster Recovery, Contingency Planning, and Business Continuity Management
• Risk Monitoring, KRIs, and Governance Reporting
• Third-Party and Outsourcing Risk Management
• Privacy Governance, Data Privacy, and DPIA Concepts
• Information Security and Control Frameworks
• Policy, Procedure, and Documentation Management
• Strong Analytical and Critical Thinking Skills
• Communication and Stakeholder Management
• Problem-Solving and Decision-Making Skills
• Documentation and Report Writing
• Governance and Compliance Monitoring
• Attention to Detail and Time Management
• Proficiency in Microsoft Office Applications (Excel, Word, PowerPoint)