CrawlJobs Logo

Cyber Controls & Audit Expert

https://www.randstad.com Logo

Randstad

Location Icon

Location:
India , Bangalore

Category Icon
Category:

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

The business risk and audit function (BR&AF) provides assurance and recommendations to the Executive Board and the Audit Committee on Randstad Group’s (risk) management, control and governance practices. Therefore the department facilitates in setting governance standards. It provides advice on internal control improvements, it conducts audits, special investigations and assignments worldwide on request of the Executive Board and Audit Committee. BR&AF’s responsibility includes the quarterly reporting based on: the risk and internal control self assessments, audit results, discussions on internal control weaknesses and analysis of the key risks reported throughout the company's management structure. This also substantiates the Group’s in-control statements.

Job Responsibility:

  • Provide management combined assurance, utilizing insights from enterprise risk management, internal control as well as internal audit, and create momentum within the company to strengthen the risk-control position related to our cyber and IT domain including processes such as SOC, SIM, IT and information security and cyber resilience
  • Coordinate, execute and report on the outcomes of risk management, internal control and internal audit in close collaboration with other involved and impacted functions within the group, such as IT
  • Support coaching & development for your team members with respect to cyber security and other technical expertises required within Risk & Audit
  • Support the planning, execution and reporting of the risk, internal control and internal audit activities in your domain to make impact
  • Travel
  • travelling is estimated to be about 20% to 30% of the job
  • Participate in risk assessments and assist in audit planning and scoping, such as: IT general controls, automated controls, RPA and IT projects
  • Perform IT controls/process audits on scope elements
  • For technical domains able to independently execute audits including: physical security, ethical hacking and technical validation of controls on multiple OSI layers
  • Support combined comfort analyses on maturity of IT general controls relevant domains
  • Participate and lead audit interviews, accountable to prepare audit workpapers and reporting, as well as assist in drafting audit findings and recommendations for management based on identified control weaknesses or process improvements
  • Support and monitor the follow-up implementation of corrective actions by management
  • Act as a resource for colleagues with less expertise.

Requirements:

  • Minimum 8 years of relevant experience
  • Minimum master degree in IT, business or economics, and related accreditation (e.g. CISA/CISM/CISSP)
  • Proven expertise on cyber security projects and processes (e.g. pentesting, SOC/CIM, IT vulnerability management)
  • Level BEC B1/B2 or higher Business English
  • Strong independent mindset
  • Experienced in international stakeholder management & change
  • Innovative thinker that challenges the status quo
  • Agile and flexible working style and passion for on the job coaching and development
  • Ability to translate profound technical knowledge on cyber into practice with a pragmatic mindset adjusting to technical and organizational developments
  • Ability to prepare audit plannings and scoping on identified (cyber) risks & opportunities
  • Ability to lead and execute internal audits/review for operational business processes, with focus on cyber and give guidance and/or instructions to junior staff in audit projects
  • Ability to report and communicate audit findings at the right tone to make impact and provide recommendations for improvements.

Additional Information:

Job Posted:
December 26, 2025

Expiration:
February 28, 2026

Employment Type:
Fulltime
Work Type:
Hybrid work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Cyber Controls & Audit Expert

Senior Audit Manager – AI Technology, Cyber, Data and GenAI Engineering

The Senior Audit Manager is within the AI Technology, Cyber, Data and GenAI Engi...
Location
Location
India , Mumbai
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Previous experience in a related role
  • Sound understanding in AI Technology, Cyber, Data and GenAI Engineering
  • Understanding of GenAI security, data and operational architecture
  • Understanding of financial services regulations and how they intersect with AI/GenAI e.g. conduct risk, operational resilience, data protection, algorithmic trading, AML/KYC, consumer protection
  • Related certifications such as Certified Information Systems (CISA), Certified Internal Auditor (CIA), Certified in Risk and Information Systems (CRISC) or similar
  • Demonstrated successful experience in business, functional and people management
  • Proven ability to execute concurrently on a portfolio of high quality deliverables according to strict timetables
  • Demonstrated ability to implement continuous improvement and innovation in audit tools and techniques
  • Consistently demonstrates clear and concise written and verbal communication
  • Demonstrated ability to remain unbiased in a diverse working environment
Job Responsibility
Job Responsibility
  • Deliver audit reports, Internal Audit and Regulatory issue validation and business monitoring and governance committee reports relating to AI Technology, Cyber, Data and GenAI Engineering
  • Act as a trusted subject matter experts on AI Technology, Cyber, Data and GenAI Engineering across the IA team
  • Oversight of portfolios within the AI Technology, Cyber, Data and GenAI Engineering team including stakeholder engagement, assessment of key emerging and inherent risks, etc
  • Participate in business initiatives and pro-actively advise and assist the business on change initiatives
  • Implement integrated auditing concepts and technology, and follow trends in the Audit field and adapt them for the Audit function
  • Identify solutions for a variety of complex and unique control issues, utilizing complex judgement and sophisticated analytical thought
  • Analyse report findings, and recommend interventions where needed, proposing creative and pragmatic solutions to risk and control issues
  • Partner with Directors and Managing Directors to develop approaches for addressing broader corporate emerging issues
  • Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behaviour, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards
  • Fulltime
Read More
Arrow Right

Technology Control and Log Review Head

The primary objective of this role is to provide Risk Control and log review ser...
Location
Location
Turkey , Istanbul
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 10+ years of progressive experience in technology risk management, IT audit, information security, or IT governance, with a significant portion in the banking sector
  • In-depth knowledge of banking industry-specific regulations and compliance requirements
  • Strong understanding of IT control frameworks (e.g., COBIT, ITIL, NIST) and information security standards (e.g., ISO 27001)
  • Professional certifications such as CRISC, CISA, CISSP, or CISM are highly preferred
  • Exceptional analytical and problem-solving skills
  • Excellent written and verbal communication skills in English
  • Demonstrated ability to build and maintain effective working relationships
  • Strong leadership capabilities
  • Ability to thrive in a fast-paced, highly regulated, and dynamic environment
  • Familiarity with SDLC, databases, operating systems, application controls, encryption, development tools and processes
Job Responsibility
Job Responsibility
  • Lead the identification, assessment, and monitoring of technology risks
  • Oversee the design and implementation of technology controls
  • Manage and coordinate all internal and external technology audits, regulatory examinations, and compliance reviews
  • Provide expert guidance and support to technology managers and teams on risk management best practices
  • Manage the tracking and remediation of all technology-related audit findings, risk issues, and control deficiencies
  • Manage communication with local regulators and auditors regarding technology-related topics
  • Collaborate with other risk functions to ensure an integrated approach to enterprise-wide risk management
  • Works closely with regional control teams on risk and control subjects
  • Acts as a technology liaison for cyber security related cases
  • Manages the Local Log Review process and the team
  • Fulltime
Read More
Arrow Right

Technology Risk Internal Audit Cloud Associate Director

Lead and oversee our team’s Cloud assurance service line, providing our clients ...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
grantthornton.co.uk Logo
Grant Thornton UK LLP
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Professional qualification (CISA, CCAK, CCSK, CCSP etc.) with post qualification experience
  • Confident managing a large portfolio of internal audit and Technology Risk clients
  • Experience of scoping and delivering technology internal audits and Technology Risk engagements (ie first / second line assurance activities), and developing reports and presenting conclusions to relevant senior stakeholders
  • Experience of managing internal audits of large companies in addition to dealing with complex technical matters, in particular areas related to the configuration, resilience, and security of Cloud platforms and solutions (inc IaaS, PaaS, and SaaS)
  • Strong experience of a range of cloud governance, technical configuration, and cloud specific topics such as security, data protection/privacy, availability, resilience, disaster recovery, performance, cost management, third-party management, and change management
  • Experience of auditing public (such as AWS, Azure and Google Cloud) and/or private (such as VMWare) cloud platforms
  • Knowledge and familiarity with the Cloud Security Alliance Cloud Controls Matrix, cloud vendor Well Architected frameworks and Agile methodologies
  • Ideally a good track record of performing IT audits over DevSecOps / CICD pipelines, including release management, source code management, testing, security, use of tools and automation
  • Experience of delivering a technology audit / technology risk covering a broad range of areas, including cyber and network security, IT resilience, IT transformations, IT strategies, data protection, supplier management, and other
  • Extensive experience of using audit software and Microsoft packages
Job Responsibility
Job Responsibility
  • Take ownership and lead on allocated assignments and client accounts
  • Be responsible for overseeing the delivery of a number of technology internal audit / technology risk engagements and manage portfolio of technology audit / technology risk engagement and relationships with clients
  • Support and lead business development activities, winning new clients and upselling services to existing clients
  • Lead on planning conversations with clients, and in the preparation of draft terms of reference/audit planning documents
  • Providing subject matter expert input into technology audit / technology risk engagements and overseeing fieldwork performed by more junior team members
  • Oversee, and review the work of, junior members of the team, supporting development and ensuring quality in the work performed
  • Hold close-out meetings with clients to ensure that they have a full understanding of issues identified and these are agreed, and write reports summarising the key observations from the work performed
  • Presenting reports and findings at Audit Committees and other senior management committees
  • Support in the development of new technology audit / technology risk service lines and initiatives within BRS, with a focus (but not exclusively) on Cloud assurance
  • Assist with the financial management of client relationships, including monitoring WIP, raising invoices, ensuring an adequate margin is achieved on engagements, and preparing budgets
What we offer
What we offer
  • Flexible working
  • Reduced hours and job shares considered
  • Support to balance work and life
  • Inclusive culture
  • Real opportunity
  • Work life balance
  • Freedom to bring your whole self to work
  • Pursue your passions inside and outside of work
  • Secondments
  • Fundraising for local charities
Read More
Arrow Right
New

Third Party Risk Management (TPRM) Consultant - Principal

Do you want to boost your career and collaborate with expert, talented colleague...
Location
Location
Poland
Salary
Salary:
Not provided
Workable
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Extensive experience in Third Party Risk Management (TPRM) and Governance, Risk & Compliance (GRC) at enterprise level
  • Strong background as Security Assessor, Auditor, and Risk Consultant
  • Proven experience leading TPRM, vendor risk, and supplier assurance programmes
  • Experience acting as Project Manager, Delivery Lead, and Programme Lead for complex engagements
  • Strong knowledge of regulatory and security frameworks: ISO 27001, NIST, SOC2, GDPR, DORA, NIS2, etc.
  • Hands-on experience with GRC / TPRM platforms, ideally including OneTrust
  • Ability to design and implement third-party risk frameworks, policies, and governance models
  • Strong stakeholder management skills at executive and board level
  • Proven people management experience, including team leadership and mentoring
  • Ability to balance security, risk, compliance, and business enablement
Job Responsibility
Job Responsibility
  • TPRM Proposals & Strategy: Lead the development of TPRM and GRC proposals, defining scope, delivery models, governance structures, and operating models and design enterprise-level Third Party Risk Management strategies aligned with regulatory, operational, and cyber risk requirements
  • Client Engagement Leadership: Lead and manage complex client engagements in Third Party Risk Management, vendor risk, and GRC and act as engagement lead and trusted advisor for executive stakeholders (CISO, CRO, Risk, Compliance, Procurement, Legal)
  • ensure successful delivery of TPRM services including assessments, frameworks, tooling, and operationalisation
  • Security Assessment & Audit Leadership: Lead third-party security assessments, audits, and assurance activities and define assessment methodologies, risk scoring models, control frameworks, and reporting structures
  • oversee supplier due diligence, onboarding risk processes, and continuous monitoring programmes
  • Technical & Methodological Authority: Serve as subject matter expert for TPRM, GRC platforms, and vendor risk methodologies and provide leadership in the use of GRC and TPRM tooling (e.g. OneTrust, Archer, ServiceNow GRC, similar platforms)
  • Framework Design & Governance: Design and implement scalable Third Party Risk frameworks, policies, standards, and operating models and align TPRM frameworks with industry standards and regulatory requirements (e.g. ISO 27001, NIST, SOC2, GDPR, DORA, NIS2)
  • Project, Delivery & Programme Leadership: Act as Project Manager, Delivery Lead, and Programme Lead for large-scale TPRM initiatives and manage multi-stream delivery, dependencies, risks, and stakeholder alignment
  • Team Leadership & Management: Lead, mentor, and develop a team of consultants (up to 5 direct reports) and build high-performing delivery teams and ensure capability development in TPRM and GRC
  • Risk & Compliance Management: Identify, assess, and manage third-party risks across cyber, operational, regulatory, and reputational domains and advise clients on risk treatment strategies, remediation plans, and control improvements
What we offer
What we offer
  • Industry-leading compensation and benefits
  • Top training and development opportunities
  • Inclusive and entrepreneurial culture
  • Global reach
  • Recognized as one of the UK’s top firms by the Financial Times and Forbes
  • On Germany’s top employers list for 2023
  • Named on list of Best Firms to Work for by Management Consulting Magazine
  • Recognized by the Top Employers Institute for exceptional standards in employee conditions across Europe for five years in a row
Read More
Arrow Right

Lead Platform Engineer

To design, develop and improve software, utilising various engineering methodolo...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
barclays.co.uk Logo
Barclays
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Hands-On Technical Leadership: Deliver core platform components (Python services, orchestration, GPU clusters, inference gateways, model registries)
  • Technical Strategy & Direction: Define and evolve the technical roadmap for AI enablement—covering generative AI, LLMOps, model serving, and data pipelines
  • Platform at Scale: Apply experience running large-scale distributed platforms with high reliability, cost efficiency, and security
  • Gen AI Expertise: Understand unique challenges in Generative AI (e.g., latency, cost, safety, evaluation, fine-tuning) and design solutions accordingly
  • Plugged into AI Developments: Stay current with emerging AI trends, foundation models, open-source tooling, and best practices
  • bring insights into platform evolution
  • Governance & Risk Management: Embed secure-by-design principles, compliance controls, and auditability into platform architecture
  • Ensure adherence to data privacy, model governance, and AI safety standards
  • Partner with Risk, Compliance, and Cyber teams to mitigate operational and regulatory risks
  • Build High-Quality Systems: Write clean, maintainable code
Job Responsibility
Job Responsibility
  • Development and delivery of high-quality software solutions by using industry aligned programming languages, frameworks, and tools. Ensuring that code is scalable, maintainable, and optimized for performance
  • Cross-functional collaboration with product managers, designers, and other engineers to define software requirements, devise solution strategies, and ensure seamless integration and alignment with business objectives
  • Collaboration with peers, participate in code reviews, and promote a culture of code quality and knowledge sharing
  • Stay informed of industry technology trends and innovations and actively contribute to the organization’s technology communities to foster a culture of technical excellence and growth
  • Adherence to secure coding practices to mitigate vulnerabilities, protect sensitive data, and ensure secure software solutions
  • Implementation of effective unit testing practices to ensure proper code design, readability, and reliability
  • Provide expert advice to senior functional management and committees to influence decisions made outside of own function, offering significant input to function wide strategic initiatives
  • Manage, coordinate and enable resourcing, budgeting and policy creation for a significant sub-function
  • Escalates breaches of policies / procedure appropriately
  • Foster and guide compliance, ensure regulations are observed that relevant processes in place to facilitate adherence
What we offer
What we offer
  • Competitive holiday allowance
  • Life assurance
  • Private medical care
  • Pension contribution
  • Supporting active commuters
  • Time to connect
  • Wellbeing in focus
  • Advanced trading floors
  • Hybrid working
  • Fulltime
Read More
Arrow Right

Senior Cybersecurity Engineer - AI Data

The Cybersecurity Engineer will help ensure that our software, systems and infra...
Location
Location
United States , Frisco
Salary
Salary:
103400.00 - 186400.00 USD / Year
https://www.t-mobile.com Logo
T-Mobile
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's Degree, Computer Science, or Information Technology (required)
  • 4-7 years’ Experience in info security technology or related field
  • 2+ years of experience working with Generative AI models, AI APIs (such as OpenAI, Hugging Face, or similar), and AI / ML integration in software development
  • Implemented SSO/MFA, SCIM, RBAC and Need‑to‑Know models for AI workflows
  • partnered with Data Protection on Varonis classification and lineage
  • 2+ years operating DSPM/SSPM or AI-SPM controls, including policy design, tuning, and exception handling
  • Built classification/tagging and lineage for sensitive datasets used in AI training/inference
  • integrated data controls with pipelines and storage services
  • Experience with incident handling for Security breaches
  • 2-4 years’ Technical Project Management
Job Responsibility
Job Responsibility
  • Participates AI use‑case intake & security reviews
  • document decisions, compensating controls, and audit evidence
  • Designs and implements Need-to-Know (NTK) data policies for AI datasets and tools
  • translate business/legal requirements into solution rules and RBAC models
  • Engineer SSO/MFA, SCIM, and RBAC for AI SaaS and internal AI services
  • ensure least-privilege, purpose-binding, and auditable approvals
  • Drives data classification/tagging and lineage
  • define classification rules, labels, and inheritance for AI training/inference data flows
  • Integrates AI-SPM discovery findings with data controls to identify shadow-AI use and enforce gating/exception workflows
  • Participates in secure design reviews and threat modeling for data-centric AI use cases
What we offer
What we offer
  • Competitive base salary and compensation package
  • Annual stock grant
  • Employee stock purchase plan
  • 401(k)
  • Access to free, year-round money coaches
  • Annual bonus or periodic sales incentive or bonus
  • Medical, dental and vision insurance
  • Flexible spending account
  • Paid time off and up to 12 paid holidays
  • Paid parental and family leave
  • Fulltime
Read More
Arrow Right
New

ServiceNow Sr Technology Analyst, CMDB and Service Mapping Specialist

We are seeking an experienced ServiceNow CMDB & Service Mapping Specialist with ...
Location
Location
United States , Bethesda
Salary
Salary:
100400.00 - 166100.00 USD / Year
https://www.marriott.com Logo
Marriott Bonvoy
Expiration Date
March 05, 2026
Flip Icon
Requirements
Requirements
  • 5+ years of experience with ServiceNow CMDB and Discovery, including administration and customization
  • 3+ years hands-on experience with ServiceNow Service Mapping, including troubleshooting, pattern design, and multi-layer service modeling
  • 3+ years’ experience in IT Infrastructure and service management
  • Strong scripting skills: JavaScript, Glide API, MID Server scripting, and command-line parsing (e.g., shell, PowerShell)
  • Deep knowledge of CSDM, CI lifecycle management, and data governance
  • Experience troubleshooting probe failures, discovery logs, and mapping gaps
  • Knowledge of hybrid infrastructure environments (cloud/on-prem), containerized services, or microservices
  • Strong understanding of ITIL processes, especially Change, Incident, and Problem Management
  • Ability to communicate technical findings to non-technical stakeholders
  • Strong analytics skills with a focus on identifying and resolving service mapping inaccuracies and optimizing discovery processes
Job Responsibility
Job Responsibility
  • Design, build, and maintain ServiceNow CMDB structures in alignment with the Common Service Data Model (CSDM 4.0/5.0)
  • Configure and troubleshoot ServiceNow Discovery and Service Mapping to ensure accurate, near-real-time population of CI relationships
  • Configure and maintain the ServiceNow Service Mapping capability to accurately represent the relationships and dependencies between IT infrastructure and Service
  • Leverage ServiceNow discovery to automate the identification of applications, infrastructure and service ensuring real-time accuracy or service maps
  • Create and refine Service maps to enhance visibility across the entire IT environment, covering applications, networks, databases and services
  • Develop custom patterns and probes, leveraging scripting capabilities (e.g., JavaScript, Glide API, MID Server command execution) to support non-standard or complex infrastructure components
  • Partner with stakeholders across infrastructure, application, and business teams to map services from top-down and bottom-up perspectives
  • Collaborate with IT teams to gather requirements and ensure service maps align with services and objectives
  • Integrate CMDB with Incident, Change, Problem, and IT Asset Management processes to support ITIL v4 alignment and regulatory compliance
  • Monitor data quality through KPIs (e.g., completeness, compliance, correctness) and drive remediation efforts
What we offer
What we offer
  • 401(k) plan
  • stock purchase plan
  • discounts at Marriott properties
  • commuter benefits
  • employee assistance plan
  • childcare discounts
  • medical, dental, vision coverage
  • health care flexible spending account
  • dependent care flexible spending account
  • life insurance
  • Fulltime
Read More
Arrow Right

Senior Cybersecurity Engineer - AI

The Cybersecurity Engineer will help ensure that our software, systems and infra...
Location
Location
United States , Frisco
Salary
Salary:
103400.00 - 186400.00 USD / Year
https://www.t-mobile.com Logo
T-Mobile
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's Degree, Computer Science, or Information Technology (required)
  • 4-7 years’ Experience in info security technology or related field
  • 2+ years of experience working with Generative AI models, AI APIs ( such as OpenAI, Hugging Face, or similar), and AI / ML integration in software development
  • Led rollouts and production hardening for AI Security platforms such as Reco (AI‑SPM/SaaS discovery), Knostic (NTK policies), S1/Prompt Security (endpoint guardrails), or equivalent tools
  • Implemented SSO/MFA, SCIM, RBAC and Need‑to‑Know models for AI workflows
  • partnered with Data Protection on Varonis classification and lineage
  • Experience with incident handling for Security breaches
  • 2-4 years’ Technical Project Management
  • Experience with high level design architecture, security technologies, Networking, web services and SOA
  • Understanding of encryption, obfuscation, tokenization technologies
Job Responsibility
Job Responsibility
  • Lead AI use‑case intake & security reviews
  • document decisions, compensating controls, and audit evidence
  • Perform and guide threat modeling for AI/data/agent workflows
  • translate findings into technical requirements for gateways, guardrails, and NTK enforcement
  • Define, publish, and maintain AI security standards/guardrails (prompt/log retention, purpose‑binding, kill‑switch, secrets handling, retention/expiration)
  • Engineer identity & access controls (SSO/MFA, SCIM, RBAC) that enforce Need‑to‑Know
  • coordinate with Data Protection on Data Security Posture Management and permission awareness
  • Operationalize runtime protections: deploy/monitor AI and Data Security frameworks, AI discovery & policy enforcement
  • integrate Prompt Security and cloud and SaaS posture signals (e.g., Wiz)
  • Leads security, compliance, and risk assessments on projects throughout project lifecycle
What we offer
What we offer
  • competitive base salary and compensation package
  • annual stock grant
  • employee stock purchase plan
  • 401(k)
  • access to free, year-round money coaches
  • annual bonus or periodic sales incentive or bonus
  • medical, dental and vision insurance
  • flexible spending account
  • employee stock grants
  • employee stock purchase plan
  • Fulltime
Read More
Arrow Right