Technology Controls Remediation Lead

Project/Role/Task Description:

Support a remediation project focused on improving poor-performing technology controls and completing required remediation activity to enhance both control design effectiveness and operating effectiveness. The role will focus on controls relating to operational resiliency, privileged access management, and identity and access management.

Key responsibilities include:
Reviewing poor-performing controls to identify root causes, design gaps and operating effectiveness issues.
Supporting remediation planning, including defining actions, owners, milestones and evidence requirements.
Working with control owners, technology teams, risk teams and audit stakeholders to drive timely completion of remediation activity.
Assessing whether existing control designs are fit for purpose and recommending improvements where needed.
Supporting the enhancement of control operating models, including control frequency, evidence standards, accountability and governance.
Tracking remediation progress and escalating risks, blockers and overdue actions.
Preparing clear status reporting for senior stakeholders and governance forums.
Reviewing remediation evidence to confirm that actions are complete and sustainable.
Supporting readiness for control testing, audit review, assurance activity or regulatory scrutiny.
Helping embed improved control discipline across resiliency, PAM and IAM processes.

Candidate Must-Have Skills and Requirements
The ideal resource should have experience in:
Technology risk, IT controls, cyber risk, operational resilience or IT audit.
Control remediation within a financial services, banking or regulated environment.
Assessing both design effectiveness and operating effectiveness of controls.
Working with control frameworks, risk and control self-assessments, audit findings or assurance reviews.
Managing remediation plans from issue identification through to closure.
Stakeholder management across technology, risk, compliance and audit teams.
Producing concise governance reporting, issue papers and remediation updates.

Strong knowledge is required in one or more of the following areas:
Operational resiliency
Service resilience, critical business services, disaster recovery, business continuity or technology recovery controls.
Evidence standards for resilience testing, recovery plans, impact tolerances or continuity procedures.

Privileged Access Management
Privileged account governance, joiner-mover-leaver controls, periodic access reviews and privileged access recertification.
PAM tooling, vaulting, break-glass access, session monitoring or privileged account ownership.

Identity and Access Management
Access provisioning, deprovisioning, role-based access controls and segregation of duties.
IAM control testing, access review quality, leaver controls and access governance.

Key skills
Strong control analysis and remediation management skills.
Ability to translate control issues into practical remediation actions.
Excellent stakeholder engagement and delivery discipline.
Strong written communication and senior-level reporting skills.
Ability to challenge control owners constructively.
Comfortable working with ambiguity and driving structure around complex issues.
Strong attention to detail, especially when reviewing evidence for closure.

Strong control analysis and remediation management skills.
Ability to translate control issues into practical remediation actions.
Excellent stakeholder engagement and delivery discipline.
Strong written communication and senior-level reporting skills.
Ability to challenge control owners constructively.
Comfortable working with ambiguity and driving structure around complex issues.
Strong attention to detail, especially when reviewing evidence for closure.