Information Security Audit & Regulatory Specialist

Role Description

SMBC is seeking a Information Security Audit & Regulatory Specialist to join our Information Security team in Tralee.

This role will coordinate and manage information security audit and regulatory engagements, working closely with auditors, control owners and subject matter experts to ensure requests are clearly understood, appropriately evidenced and delivered on time.

This is not an Internal Auditor position. It is an opportunity for someone with experience in IT audit, technology risk, assurance or cyber security governance to move into a role managing audit and regulatory engagement from within Information Security.

Role Objectives: Delivery

• Coordinate information security audits and regulatory engagements from initial request through to remediation and closure.
• Manage audit requests, evidence submissions and associated deadlines across multiple engagements.
• Review and challenge evidence to ensure appropriate documentation and artefacts are provided.
• Work closely with auditors, control owners and subject matter experts to clarify audit requirements and facilitate responses.
• Translate audit requests into clear requirements for evidence providers.
• Engage with auditors on information security controls and supporting evidence, working with control owners and subject matter experts to address queries.
• Review preliminary audit findings and work with relevant stakeholders to validate their accuracy and completeness.
• Track audit findings and remediation actions against agreed milestones through to closure.
• Support the preparation and review of issue closure documentation.
• Maintain audit evidence repositories, helping identify evidence that can be leveraged across similar requests.
• Maintain accurate audit status information, dashboards and management reporting.
• Provide guidance and support to other ARM team members as required.
• Contribute to continuous improvement of ARM processes, standards, documentation and tools.
• Support the development and delivery of training on ARM processes and tools across Information Security.

Qualifications and Skills

• Bachelor's degree in Information Technology, Information Security or a related discipline, or equivalent relevant experience.
• 3+ years' experience in IT audit, technology risk, assurance, cyber security governance or a related area.
• Good understanding of IT General Controls, information security controls, technology risk and the audit lifecycle.
• Experience supporting or coordinating audits, assessments or regulatory engagements within a large or regulated organisation.
• Knowledge of relevant information security and regulatory frameworks such as ISO 27001/27002, NIST and GDPR.
• Professional certification such as CISA, CISM, CRISC or CISSP is advantageous but not essential.
• Strong written and verbal communication skills with the ability to work effectively with auditors, technical teams and senior stakeholders.
• Strong organisational and analytical skills with excellent attention to detail.
• Ability to manage multiple priorities, take ownership of deliverables and work independently.
• A collaborative approach with an interest in improving processes and developing within information security risk and assurance.

Additional Requirements