IT Risk and Control Specialist

About the role

Join a leading investment banking client as an IT Risk and Controls Expert. You will strengthen the organisation's cybersecurity programme by evaluating controls, assessing information‑security risks and providing guidance for risk‑based decisions.

Key responsibilities

• Manage cybersecurity activities, including identification, assessment and mitigation of information‑security risks.
• Conduct security assessments of internal projects and third‑party service providers to verify control effectiveness and compliance.
• Provide security advisory services to stakeholders, translating technical findings into business‑friendly recommendations.
• Coordinate security‑related projects, ensuring timely delivery and alignment with cybersecurity objectives.
• Drive third‑party risk discussions, communicate business impacts and guide remediation actions.

Required profile

• Proven experience in information security, cybersecurity or IT risk management, preferably within financial services or regulated environments.
• Strong understanding of risk management methodologies, control frameworks and the ability to influence stakeholders at all levels.
• Excellent analytical, problem‑solving and communication skills, with a practical approach to risk remediation.

Required skills

• Familiarity with industry frameworks such as NIST CSF, ISO 27001, CIS Controls or COBIT.
• Knowledge of cloud security concepts and experience with AWS, Azure or GCP security capabilities.
• Experience performing security assessments, control effectiveness reviews and third‑party risk evaluations.

What we offer

• Global relocation options and experience in an international, cross‑cultural environment.
• Comprehensive learning programs, including access to cloud academies (MS, AWS, Google) and internal/external training platforms.
• Well‑being benefits such as Multisport cards, private healthcare, dental support and life insurance.
• Generous time‑off policies, including annual holidays, parental leave and occasional leave.
• Social and CSR initiatives, company events and a supportive multicultural team.