Risk Partner - Control Testing

In this role you will:

The Risk and Control Partner reports to the Head of Risk Performance

Champion the delivery and use of the new GRC Tool

Ensure that Control Testing Frameworks aligns to the ERM principles and other control frameworks in place (e.g. ISAE-baseline, Agile Control Framework).

Apply expertise to challenge control owners and testers, to ensure the risk is appropriately mitigated and the mixture of controls is suitable (per risk(s)).

Support Risk Department colleagues during RCSA activity and provide expert input and guidance on i) which controls are needed, ii) how to document controls in line with the framework and iii) how to write test steps to robustly test controls.

Sample and then challenge control testing that the first line has completed, to provide a second line opinion on how robust the testing is (in line with the CT framework). Identify areas that require further support/ training/ etc and make arrangements to provide this.

Identify opportunities to automate controls and/ or their testing.

Oversee first line control testing progress, including escalation of control tests at risk of missing deadlines.

Monitor and report RCSA progress against plan on a weekly basis, and escalate any at risk of missing deadlines.

Support the preparation of regular reporting to Executives and Board. Collate information from various sources and analyse to gain insights.

Input and support the medium-long term view on continuous improvement of RCSAs and first line control testing.

Prepare and present ad-hoc training/ awareness (RCSA and/ or controls testing) requested by first line as well as regular updates (usually held as 'all company' Teams calls).

Develop specific skills and understanding related to own area of expertise. Bring new external ideas to improve processes.

Drive simplification and a harmonised approach in documenting and testing controls.

What will make you successful?

We are seeking professionals with:

8+ years of experience as an internal auditor, tech risk or compliance specialist (or equivalent)

Understanding of risk management principles and experience of implementation

Critical thinking skills, ability to challenge and deliver feedback

Relationship management skills, ability to present difficult messages well

Ability to see the bigger picture and support Swift overall

Confidence to speak-up

Preferred qualifications:

Degree-level education

Relevant professional qualification (CIA, CIIA, IRM, CISA, etc)