IT Risk & Control Analyst

Coordinate and track the remediation of IT audit points in collaboration with IT teams and internal/external auditors. Conduct root cause analysis for audit findings and document corrective action plans. Develop, update, and maintain IT standard operating procedures (SOPs) aligned with organizational policies and regulatory requirements. Support the execution and documentation of periodic IT risk assessments across systems, applications, and processes. Assist in maintaining the IT risk register, ensuring timely updates and risk mitigation follow-ups. Participate in control testing and validation activities related to IT general controls (ITGC) and application controls. Collaborate with control owners and IT process owners to ensure controls are effectively designed and operating. Provide inputs for IT governance reporting, including dashboards, risk indicators, and compliance metrics. Assist in maintaining alignment with regulatory and industry frameworks (e.g., ISO 27001, NIST, COBIT). Requirements Bachelor’s degree in Computer Science, Information Technology, or related field. 3+ years of experience in IT risk management, IT governance, or IT audit. Experience working on audit remediation and control testing. Familiarity with IT risk assessment methodologies and frameworks (e.g., NIST RMF, ISO 31000). Strong documentation skills, with experience drafting SOPs, policies, and audit evidence. Knowledge of regulatory requirements (e.g., GDPR, local banking regulations) is an advantage. Certifications such as CISA, CRISC, or ITIL are a plus. Experience with GRC tools is a plus (e.g., Archer, MetricStream, ServiceNow GRC).