IT Internal Control Analyst

The IT Internal Control Analyst supports the execution of internal control activities within the 2nd line Risk Management function, with a focus on IT processes and systems. The role involves performing testing procedures, documenting results, and supporting the identification of control weaknesses specifically in the IT domain. The Analyst works closely with the Team Leader and other team members to deliver high-quality assurance over the company's control environment and contributes to the ongoing improvement of risk management processes.

• Execute assigned control testing procedures in accordance with the annual plan and methodology.

• Document test results, evidence, and conclusions in a clear and structured manner.

• Communicate findings and potential issues to the Team Leader and support the follow-up of remediation actions.

• Assist in the preparation of reports and presentations for management.

• Track and verify IT control remediation with pragmatic, risk-based support.

• Collaborate with 1st line IT and business process owners to understand control design and operation.

• Contribute to process improvement initiatives within the control testing team.

• Maintain up-to-date knowledge of internal policies, procedures, and relevant regulations.

• Support the development of a strong risk and control culture within the organization.

• Good understanding of internal controls and risk management principles.

• Basic knowledge of IT, cybersecurity, and key risk control frameworks (e.g., NIST, COBIT).

• Strong analytical and attention-to-detail skills.

• Effective written and verbal communication skills.

• Ability to work collaboratively in a team environment.

• High level of integrity and professional scepticism.

• Strong organizational skills and ability to manage multiple tasks.

• Proficiency in data management.

• Proficiency in English; other languages are an advantage.

• Education: Completed university degree in Information Technology, Finance, Accounting, Business Administration, or a related field.

• Experience: Experience of working in an internal control, audit or IT risk assurance department is required. Experience in insurance, reinsurance or financial services would be advantageous.