IT Risk Associate Director

An exciting opportunity has arisen to join a rapidly growing and progressive business in Dublin 2. Reporting directly to a Director of Risk you will be responsible for managing ITGC auditing assignments, IT internal audits, third party assurance engagements and IT Risk consulting assignments for a broad range of clients, including large private companies, publicly quoted companies, and companies that are required to comply with the Sarbanes-Oxley Act. This work will involve examining and critically assessing clients’ IT controls, devising suitable test approaches, planning and managing test execution and resolution of control deficiencies, managing and guiding IT risk managers/ seniors and/or juniors, and advising clients on IT risk process and control improvements.

The role also provides a strong candidate with the opportunity to broaden his or her expertise into the related fields of business advisory and consulting services. The ideal candidate will possess a high degree of commercial awareness. Excellent progression available for the successful candidate.

Responsibilities

• Managing the execution of third party assurance audits – SOC 1, 2 and 3
• Leading IT risk advisory teams responsible for examining and documenting IT controls and financial systems Planning and managing the execution of tests of ITGC audits – for a number of large plc, banking and SME audit clients
• Advising on and assisting with the remediation of control deficiencies
• Providing subject matter expertise to clients on IT risks and controls and information security
• Preparing management reports detailing issues found and recommendations to resolve them
• Liaising with financial and corporate audit management and clients to ensure that all aspects of the ITGC audit and compliance process are satisfactorily completed
• Supporting internal senior management stakeholders with ad hoc IT risk project requests

Requirements

• 5+ experience in financial and information systems auditing, internal controls/ compliance
• Extensive experience of COBIT, ITIL and COSO control frameworks and application of same
• Strong third party assurance capabilities
• An ability to navigate complex IT control environments couple with an understanding of ISAE3402/ SSAE18 regulations
• Good project management skills, and the ability to plan and manage projects with several staff
• Excellent written and oral communication skills
• Attention to detail Good technical IT knowledge, including knowledge of networking, IT security, operating systems and financial application

Desirable Skills

• Qualification in information systems auditing (CISA, CISSP or similar) Relevant industry experience, with an interest in retuning to a professional services environment Interest in the IT industry in general, and in business consulting services