Technology Risk Management Specialist

We are seeking a seasoned Technology Risk Management Specialist to join our team. As a key member of our IT audit department, you will be responsible for identifying, assessing, and mitigating technology risks that could impact our business operations.

Your primary focus will be on analyzing and evaluating our IT systems, applications, and infrastructure to ensure they are running securely, efficiently, and effectively, while meeting compliance regulations.

You will be expected to have a deep understanding of technology and cybersecurity, as well as the ability to communicate complex technical issues in simple terms to non-technical stakeholders.

The successful candidate will have extensive knowledge of and skill in applying ISACA IT Audit and Assurance Standards, Guidelines, and Tools and Techniques, as well as international standards and frameworks such as COBIT, ISO 27001, NIST Cybersecurity Framework, ITIL, OWASP Top 10, CIS Critical Security Controls.

In this role, you will conduct IT audits of networks, applications, security, systems development, and processes, collecting and evaluating data on our systems, practices, and operations, and conducting fieldwork to identify problems and solutions.

You will also develop and implement IT audit review procedures, examine IT controls, evaluate their design and operational effectiveness, determine exposure to risk, and develop remediation strategies.

Additionally, you will participate in the development of the annual IT audit plan, perform IT audit reviews using established auditing standards, and develop IT Audit programs for each assignment.

As a Technology Risk Management Specialist, you will provide recommendations and guidance on identified security and IT risks, communicate complex technical issues in simplified terms to relevant staff, and develop a strong understanding of business processes.

You will also prepare audit reports and working papers to ensure adequate documentation exists to support completed audits and conclusions, and present written and oral reports and other technical information in a pertinent, concise, and accurate manner.

Lastly, you will follow up on audit findings to ensure management has taken corrective actions, provide consulting services and assistance in technology-related projects and in the IT risk management process, and coordinate and interact with external IT auditors and regulators.

• Master's degree in Computer Science, Information Technology, Information Systems, or related field;
• Certified Information Systems Auditor (CISA) highly desired;
• Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Information Security Specialist (CISSP), Certified ISO/IEC 27001 Lead Auditor, internal auditing or forensic certification a plus;

• 5 years of full-time experience as an IS/IT auditor;
• IS audit experience in microcredit industry, financial services, commercial banks, audit companies, or central banks is a plus;
• Multicultural and remote audit experience is a plus;

This is a challenging yet rewarding role that requires a unique blend of technical expertise, business acumen, and communication skills.

If you are passionate about technology, cybersecurity, and risk management, we encourage you to apply for this exciting opportunity.