Technology Consultant (Resilience, PAM & IAM)

Overview

In this role you drive remediation of underperforming technology controls as part of a critical programme. You partner with technology, risk, and audit to ensure designs and operating effectiveness are robust and evidenced. You focus on resilience, PAM, and IAM to strengthen control environments in regulated settings. You’ll shape remediation plans, escalate blockers, and deliver audit-ready outcomes that support regulatory expectations.

Responsibilities

• Control assessment and diagnosis to identify root causes, design gaps, and operating effectiveness issues
• Remediation planning and execution with structured plans, ownership, milestones, and evidence requirements
• Stakeholder engagement with technology, risk, compliance, internal audit and assurance teams
• Control framework enhancement for operating models, evidence standards, governance and accountability
• Governance and reporting of remediation progress, risks, blockers, and overdue actions
• Audit and assurance readiness support for control testing, internal/external audits, and regulatory reviews
• Review remediation evidence for completeness and sustainability
• Embed consistent control discipline across resilience, PAM, and IAM domains

Key requirements

• Proven experience in Technology Risk / IT Controls, Cyber Risk, IT Audit, or Operational Resilience
• Strong track record delivering control remediation in financial services or regulated environments
• Experience assessing control design and operating effectiveness
• Familiarity with RCSA, audit findings, issue management, and regulatory reviews
• Ability to manage remediation lifecycle from identification to closure
• Understanding of critical business services, disaster recovery, and resilience testing

• Strong stakeholder management
• Excellent written communication for senior stakeholders
• Constructive challenge of control owners
• PAM (Privileged Access Management) knowledge including joiner/mover/leaver processes, access recertification
• IAM (Identity & Access Management) concepts including RBAC and SoD
• Control testing and evidence review

…