IT Risk & Control (Middle/Senior)

ABOUT THE JOB

• Coordinate the annual Technology Risk and Control Self-Assessment (RCSA) process in PRISM, including control planning, stakeholder engagement, evidence collection, assessment coordination, and completion tracking.
• Review control descriptions and supporting evidence to assess control design and operating effectiveness, identify gaps or inconsistencies, and recommend remediation or escalation where required.
• Support technology incident risk coordination by facilitating root-cause analysis, aligning incident owners and action owners, validating supporting evidence, and tracking corrective and preventive actions.
• Manage technology risk issues and remediation actions by maintaining accurate trackers, monitoring deadlines, following up with responsible stakeholders, validating closure evidence, and escalating overdue or high-risk items.
• Coordinate second-line Risk reviews by managing information requests, preparing and validating evidence, supporting walkthroughs, and ensuring timely completion of review activities.
• Track second-line findings and remediation commitments through to formal acceptance, maintaining complete and audit-ready documentation.
• Prepare risk and control dashboards, management reports, ageing and overdue analysis, and thematic insights to highlight recurring control weaknesses and emerging risks.
• Collaborate with Technology teams, control owners, Information Security, Compliance, Internal Audit, and second-line Risk to support effective risk governance while maintaining appropriate independence and confidentiality.

ABOUT YOU

• Bachelor's degree in Information Technology, Risk Management, or a related discipline.
• At least 5 years of relevant experience in technology risk, operational risk, internal controls, RCSA, audit, compliance, or risk issue management.
• Practical understanding of risk and control principles, control design and operating effectiveness, incident management, root-cause analysis, and remediation governance.
• Experience with GRC platforms such as PRISM, ServiceNow GRC, or equivalent systems is strongly preferred.
• Strong analytical, evidence-review, prioritization, and problem-solving skills, with the ability to manage a high volume of controls and remediation actions across competing deadlines.
• Excellent stakeholder management and follow-up skills, with the ability to challenge constructively, drive action owners toward resolution, and communicate risks clearly to technical and non-technical stakeholders.
• Advanced working knowledge of Microsoft Excel and presentation tools, with experience developing trackers, management reports, dashboards, and ageing or overdue analysis.
• Familiarity with technology risk and control frameworks such as COBIT, ITIL, ISO 27001, or COSO is preferred. Relevant certifications such as CISA, CRISC, CIA, or equivalent are an advantage.

WHY AMARIS

• Competitive salary and 13th-month salary
• 14+ annual leaves per year
• Premium healthcare insurance, starting from your probation period
• Project reviews and yearly performance appraisals
• Annual company trips
• Teambuilding activities: Team lunch/dinner, events, and celebrations, sports clubs (football, yoga, badminton, etc.)
• International team with flexible working time
• Tailor-made career path
• Technical workshops and training courses
• Mobility: Opportunities to be on-site abroad in our offices in over 60+ countries

Equal Opportunity

Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.

#LI-NH1