IT Risk & Control Analyst
MigrationIT · Cairo, Egypt ·
- Experience
- 3+ years
- Coordinate and track the remediation of IT audit points in collaboration with IT teams and internal/external auditors.
- Conduct root cause analysis for audit findings and document corrective action plans.
- Develop, update, and maintain IT standard operating procedures (SOPs) aligned with organizational policies and regulatory requirements.
- Support the execution and documentation of periodic IT risk assessments across systems, applications, and processes.
- Assist in maintaining the IT risk register, ensuring timely updates and risk mitigation follow-ups.
- Participate in control testing and validation activities related to IT general controls (ITGC) and application controls.
- Collaborate with control owners and IT process owners to ensure controls are effectively designed and operating.
- Provide inputs for IT governance reporting, including dashboards, risk indicators, and compliance metrics.
- Assist in maintaining alignment with regulatory and industry frameworks (e.g., ISO 27001, NIST, COBIT).
Requirements
- Bachelor’s degree in Computer Science, Information Technology, or related field.
- 3+ years of experience in IT risk management, IT governance, or IT audit.
- Experience working on audit remediation and control testing.
- Familiarity with IT risk assessment methodologies and frameworks (e.g., NIST RMF, ISO 31000).
- Strong documentation skills, with experience drafting SOPs, policies, and audit evidence.
- Knowledge of regulatory requirements (e.g., GDPR, local banking regulations) is an advantage.
- Certifications such as CISA, CRISC, or ITIL are a plus. Experience with GRC tools is a plus (e.g., Archer, MetricStream, ServiceNow GRC).