• 
  Coordinate and track the remediation of IT audit points in collaboration with IT teams and internal/external auditors.
• 
  Conduct root cause analysis for audit findings and document corrective action plans.
• 
  Develop, update, and maintain IT standard operating procedures (SOPs) aligned with organizational policies and regulatory requirements.
• 
  Support the execution and documentation of periodic IT risk assessments across systems, applications, and processes.
• 
  Assist in maintaining the IT risk register, ensuring timely updates and risk mitigation follow-ups.
• 
  Participate in control testing and validation activities related to IT general controls (ITGC) and application controls.
• 
  Collaborate with control owners and IT process owners to ensure controls are effectively designed and operating.
• 
  Provide inputs for IT governance reporting, including dashboards, risk indicators, and compliance metrics.
• 
  Assist in maintaining alignment with regulatory and industry frameworks (e.g., ISO 27001, NIST, COBIT).

Requirements

• 
  Bachelor’s degree in Computer Science, Information Technology, or related field.
• 
  3+ years of experience in IT risk management, IT governance, or IT audit.
• 
  Experience working on audit remediation and control testing.
• 
  Familiarity with IT risk assessment methodologies and frameworks (e.g., NIST RMF, ISO 31000).
• 
  Strong documentation skills, with experience drafting SOPs, policies, and audit evidence.
• 
  Knowledge of regulatory requirements (e.g., GDPR, local banking regulations) is an advantage.
• 
  Certifications such as CISA, CRISC, or ITIL are a plus. Experience with GRC tools is a plus (e.g., Archer, MetricStream, ServiceNow GRC).