Technology Risk & Controls Senior Specialist

Why we're hiring:

The Technology Risk & Controls Senior Specialist operates as part of the second line Technology Risk & Controls function, working under the direction of the Technology Risk & Controls Lead.

The Senior Specialist is a subject matter expert within the Technology Risk & Controls function, responsible for delivering independent, risk-based assurance and providing strategic guidance across Business Platforms and Corporate environments.

This role operates with a high degree of autonomy, influencing stakeholders, making risk-based decisions, and shaping the control environment to be more effective, standardised, and sustainable.

What you'll be doing:

• Act as a subject matter expert across ITGCs, SOX controls, and control design
• Provide practical, risk-based guidance to stakeholders on control implementation and remediation
• Challenge control design and operation where required, ensuring alignment to audit expectation
• Engage senior stakeholders across Technology, Finance, and Transformation teams
• Lead difficult conversations on control gaps, risk acceptance, and remediation priorities
• Influence decision-making to ensure appropriate risk outcomes
• Lead complex assurance reviews across systems, processes, or programmes
• Define scope, approach, and testing strategy for key control areas
• Ensure outputs are robust, defensible, and audit-ready
• Apply strong judgement in assessing control effectiveness and residual risk
• Support risk-based prioritisation of remediation activities
• Provide clear, actionable insights to leadership
• Drive standardisation of controls and assurance approaches
• Identify opportunities to simplify the control environment while maintaining compliance
• Contribute to evolving methodology, tooling, and reporting

What you'll need:

• Certifications such as CISA, CIA, CRISC advantageous.
• Deep experience in SOX / ITGC / technology risk and controls
• Strong stakeholder management and influencing skills
• Proven ability to operate independently and lead engagements
• Strong decision-making and risk judgement capability
• Ability to translate complex control topics into clear business outcomes

Who you are: