We are seeking an experienced professional to join our Technology Risk Advisory & Cybersecurity (TRACS) practice. This client-facing role is for a professional who can lead workstreams and engagements across technology risk, cybersecurity, IT governance, compliance, IT audit, business continuity, and AI governance. The successful candidate will coordinate delivery teams, review quality, advise clients on practical improvements, and support the continued growth of the TRACS service line.
- Lead and manage assigned TRACS engagements from planning through reporting, including engagement workplans, resource coordination, quality review, client communication, and delivery tracking.
- Direct technology-risk, cybersecurity, ITGC, compliance, and cyber-maturity assessments, ensuring testing approaches and conclusions are evidence-based and aligned to the engagement scope.
- Review and validate control environments across identity and access management, change and release management, vulnerability management, security operations, cloud governance, data protection, third-party risk, and incident response.
- Translate regulatory, contractual, and standards-based requirements into practical control expectations, remediation actions, and implementation roadmaps for clients.
- Support clients in creating, enhancing, and operationalising technology-risk, information-security, cybersecurity, data-protection, business-continuity, and AI-governance policies, procedures, standards, and control frameworks.
- Lead Business Continuity Management workstreams, including business impact analyses, risk assessments, BCP/DR plan development, tabletop exercises, resilience testing, and post-test reporting.
- Manage assessments of AI and emerging-technology risks, including governance structures, data usage, model and vendor risk, secure adoption practices, and controls for unauthorised or high-risk AI use.
- Prepare and review client reports, risk registers, remediation roadmaps, executive presentations, and management updates for clarity, accuracy, and business relevance.
- Act as the day-to-day engagement lead for allocated clients, facilitate workshops, manage stakeholder expectations, resolve delivery issues, and escalate key matters appropriately.
- Review work prepared by Consultants and Senior Consultants, coach team members, and contribute to proposals, scoping discussions, service offerings, and practice-development initiatives.