Position Purpose:
The role is to provide both the Business Units and IT Management with the assurance and visibility that IT Controls are executed in a controlled and managed way. In addition to the specific responsibilities detailed below, the successful candidate will be expected to demonstrate understanding in other areas of Risk & Control Management including strategies surrounding Process Engineering, Configuration Management, Change, Incident & Problem Management, Non-Conformities and Corrective Actions Management, Risk Identification and Control, Project Management and Tools and Methods.
Responsibilities
Direct Responsibilities
Conduct periodic controls assessments across process areas in scope. Raise any non-compliance and follow up of the corrective actions until closure.
Liaise with global and local IT control areas to ensure their certification is timely and appropriate.
Perform periodic Root Cause Analysis of process issues and non-compliances at Project and Application Domain level. Ensure that the exercise is planned,
executed effectively and reported to appropriate level.
Participate in minimising production risks and issues, including but not exclusively, by helping to devise, and by implementing, sufficient regular controls.
Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
The enforcement of Permanent Controls, providing ongoing risk & controls self-assessment status of the control workplace.
Contribute all relevant management information(KPIs/KRIs) to the various scope reports/dashboards.
Assist with Historical Incident management process, including liaising with various stakeholders involved, root cause analysis and impact evaluation.
Contributing Responsibilities
Contribute to the upkeep and maintenance of the ISPL Permanent Control Framework
Maintaining relevant Operational Permanent Control (OPC IT) processes and procedures
Technical & Behavioral Competencie