IT and Cyber Risk Assurance Specialist

About the role

The IT and Cyber Risk Assurance Specialist will support the risk assurance team in planning, executing, and reporting on risk assurance reviews, with a strong emphasis on IT, cyber, data, and project risks. The role leverages data analytics and artificial intelligence to enhance assurance coverage and insight, helping the organisation strengthen its control environment.

Key responsibilities

• Assist in developing and executing the annual Risk Assurance Plan aligned with enterprise risks, regulatory requirements, and business priorities.
• Conduct or lead assurance reviews of key controls, focusing on IT, cyber, data management, change, and project risk.
• Perform risk‑based assessments across business, operational, technology, and project environments.
• Document walkthroughs, control assessments, testing procedures, findings, and conclusions following assurance methodology.
• Prepare concise assurance reports detailing issues, root causes, risk implications, and practical recommendations.
• Track management actions and validate closure of remediation activities.
• Coordinate combined assurance activities with business, risk, compliance, internal audit, and other assurance providers.
• Assess the adequacy and effectiveness of IT control frameworks, standards, policies, and procedures.
• Review system implementations, application controls, interfaces, and automated controls.
• Evaluate technology‑related risks from digital transformation, cloud adoption, outsourced services, and system changes.

Required profile

• Understanding of IT and cyber risks, technology governance, and related regulatory expectations.
• Knowledge of AI and machine learning concepts, including associated risks and governance frameworks.
• Familiarity with project governance, lifecycle risks, and delivery assurance.
• Experience with data analysis techniques and assurance use cases for analytics.
• Awareness of combined assurance principles and stakeholder coordination.
• General understanding of governance, risk management, internal control principles, and risk‑based review approaches.

Required skills

• IT risk assessment and control evaluation
• Cybersecurity controls and assurance
• Data analytics for risk assurance
• AI/ML risk governance concepts
• Project risk assessment and delivery assurance