IT Infrastructure and Security Audit Manager (4 months Contract)

IT Infrastructure and Security Audit Manager (4 months Contract)

IT Infrastructure and Security Audit Manager (4 months Contract)

Nomura International London, United Kingdom

IT Infrastructure and Security Audit Manager (4 months Contract)

Job title: IT Infrastructure and Security Audit Manager (4 months Contract)

Job Type: Temporary (PAYE)

Department: Internal Audit

Location: London

Company overview

Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Investment Management, and Wholesale (Global Markets and Investment Banking). Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit www.nomura.com.

Department overview:

The department is a key part of Nomura's corporate governance and the department's primary objectives are to review the company's control environment and report any weaknesses identified to the Audit Committee and senior management.

The Wholesale Technology Audit function forms part of the Global CIO audit team, which is globally split across Operations and IT audit specialists reporting to the Global Head of CIO Audit based in London, who in turn reports to the Global Head of Wholesale Audit who is also based in London. This position will be based in EMEA but will be expected to work on global IT Infrastructure and security audit assignments.

Role description:

The role's responsibilities are:

• Leading global audits. Including planning, fieldwork and reporting. This involves leading the global team assigned to the audit, delivery of the audit within the planned timelines, ensuring all audit work is executed and documented in accordance with our audit methodology.
• Risk Assessments. This involves interaction with technology stakeholders, review of relevant metrics as well as other internal and external material. You would also be expected to provide input into the audit plan covering the IT Infrastructure and Security portfolio.
• Continuous Monitoring. Including interaction with key technology stakeholders, review of metrics as well as other relevant internal and external material, evaluation of changes to the risk profile.
• Issue Tracking. Including determining the audit procedures required to validate the closure of audit issues.
• Data Analytics. Use of data analytics techniques on audit engagements where relevant and supporting audit colleagues to utilise data analytics to improve and enhance the audit approach.

• Experience working within IT Internal/External Audit or Second line IT functions.
• Financial services background will be beneficial although not essential.
• Strong knowledge of IT security, including both technical and business controls.
• Relationship management: Ability to develop and maintain strong relationships with subject matter experts and IT leaders across the organisation. Work collaboratively with other Internal Audit stakeholders.
• Strong time and project management skills, consistently delivering to deadlines (budget and time).
• Very good knowledge of leading technology reviews including: Linux, Windows, Messaging infrastructure, Collaboration Tools, Cloud infrastructure, Remote Access technologies and networking products.
• Experience in assessing controls based on COBIT or other leading technology risk management and governance control framework.
• Experience in assessing controls based on NIST, SANS, ISO27000 or other leading cyber security framework.
• Very good presentation and report writing skills. Producing draft reports that require minimal changes.
• Qualifications: University degree in a technology related discipline and CISSP/CISA/CISM or equivalent certifications are required. Other relevant qualifications will be beneficial but not required.

• Understand clients' needs and issues, and respond with high-quality proposals
• Acquire capabilities to perform one's responsibilities and contribute to being a Trusted Partner

• Produce new ideas that might challenge the status-quo or oneself

• Seek advice from senior colleagues and utilize it for improved results
• Collaborate with members from relevant departments

• Contribute to the success of the organization both quantitatively and qualitatively, and act with awareness of the impact on others
• Serve as role model and provide guidance to junior employees

• Have a good understanding of corporate philosophy, professional ethics, compliance, risk management, and code of conduct, and make decisions and take actions accordingly

Boost your career