Senior IT Risk and Cyber Audit Consultant

Required start date ASAP Duration 6-12 months (renewable) Reason this role cannot be provided by off-shore resource SC/DV Clearance required, on-site stakeholder engagement, European presence mandatory Clearance level required: SC (Secret) or DV (Developed Vetting) depending on project scope Hybrid - 60% on-site at client locations, 40% remote. Regular travel to UK financial services and regulated sector client sites. Location/s to be visited if applicable: London, Manchester, Edinburgh, Dublin, Frankfurt, Milan (primary EMEA hubs) Project name/description: DORA andamp; Operational Resilience Programme - multi-site financial services cyber and operational risk audit engagement across UK and EMEA regulated clients Deliverables - required for SoW and to measure fulfilment of role: Design and execution of cyber audit engagements - assessing IT General Controls (ITGC), Identity andamp; Access Management (IAM), Change Management, and Cyber Resilience frameworks Technical ownership of cybersecurity governance assessments aligned with DORA, FINMA Circular 23/1, HKMA C-RAF, and ISO 27001 standards Third-party risk assessment and vendor security dependency mapping for critical suppliers and ICT service providers Cyber control assessments - process mapping, design effectiveness testing, operating model documentation for Firewall rule bases, VPN configurations, network segregation controls Operational resilience reviews - identifying control weaknesses, resilience gaps, and ..... full job details .....