Jobs, fresher vacancy - Technology Senior Controls Analyst • UK

Company: Informa Global Support

UK

Job DescriptionAs our Technology Controls Senior Analyst you will sit within the Technology Controls Team and its primary focus is to support the Technology Controls Manager to maintain and enhance Informa’s IT controls to ensure they remain effective.You are required to have a good understanding of Informa as a business, and knowledge of the Shared Service Organisation Process Control environment would be advantageous to further understand the business risks that are presented, and how these are underpinned by the General IT Controls (GITCs).You will be responsible for the management of the Risk and Control Matrices and will operate within the 2nd Line of Defence to ensure that all IT related Group policies and procedures are adhered to for the applications within the remit of the Technology Controls Team, and that controls are designed appropriately to reduce or fully mitigate any identified risks.The IT control’s function expanded, and the current Technology Controls team was established in 2020 to provide Informa management with the continued assurance over the effectiveness of the company’s General IT Controls. The team originally only provided assurance over the 2 financial ERPs SAP, and Oracle, but since its creation, it has continued to evolve and is now taking responsibility for other peripheral applications, along with coordinating the IT audit with our External Audit Partners.The team sits as part of the Technology Solutions and Services (TSS) Group under the Information Security team, reporting to the Chief Information Security Officer (CISO). You will work closely with our internal IT teams as well as our 3rd party support providers Mindtree and IBM; liaising frequently with Internal and External Audit, GBS and divisional control teams, and InfoSec with the aim of ensuring that applications maintain a controlled environment that does not encumber the efficiency of operational activity.Key Outputs and OutcomesAssist with the implementation of the Controls Management System (CMS) AuditBoard for new Risk and Control Matrix (RaCM) deployments, ensuring clear and consistent documentation standards and capturing accountabilities / responsibilities for each material controlLead implementations of the various IT Risk and Control Matrices (RaCM), ensuring that any control changes are documented, and that full training is provided to the control owners and performersDrive and monitor the remediation of gaps and control deficiencies, ensuring they are captured in line with the issue management processes and standardsMaintain AuditBoard to ensure risks and controls are updated and there is ongoing compliance across the business with the requirements of the Controls FrameworkDrive the creation and maintenance of the controls documentation to ensure they remain current, for example to consider changes arising from technology and process changesDevelop and document the testing procedure for each key control, as well as the wider population of non-key controls, assist with the execution of assurance and testing activities on an ongoing basis, liaising with the related testing resources (such as Control Owners and Performers) to refine the testing plan where appropriate, monitor testing outcomes, and resolve control issuesActively seek opportunities for control improvements such as the use of automation and new technologies that would benefit Informa.Assist with the preparation of ad-hoc reporting to key stakeholders (including Executive Committee, Audit & Risk Committee and Finance & IT Leadership Teams)Coach the Technology Controls Analysts to support with the various RaCM implementations and maintenanceWork with control owners to embed processes and procedures to implement and operationalise controls to ensure they are understood and are operating effectively.Liaise with External Audit partners to support with their review of the IT Controls as part of the Group PCAOB auditSeek opportunities for personal development to ensure that IT controls knowledge is continuously being enhanced and kept up to date.Measures of SuccessSuccessful and efficient management of Risk and Control Matrix implementationsReductions in the elapsed time taken to remediate controls deficiencies.Successful performance of controls testing and subsequent reporting.Continue to see positive results in the external audit, with a reduction in the recommendations being made.