IT Risk and Controls Assurance Specialist

IT Risk and Controls Assurance Specialist Job Snapshot
- Role: IT Risk and Controls Assurance Specialist

- Location:

Abu Dhabi, United Arab Emirates
- Industry: Banking
- Function:
Risk Management-Compliance

- Experience:

Minimum 7 years in IT risk, controls, audit or assurance, including banking or regulated financial-services experience
- Job Type: Full Time
- Work Arrangement:
On-site

Dicetek LLC is seeking an experienced IT Risk and Controls Assurance Specialist for a full-time, on-site position in Abu Dhabi, United Arab Emirates. The role focuses on independently assessing IT control effectiveness, reviewing remediation evidence and supporting regulatory and internal audit closure activities within a banking or regulated financial-services environment. The successful candidate will evaluate control designs, policies, procedures, approvals and operational evidence to determine whether remediation actions are complete, correctly implemented and supported by traceable documentation.

Working with IT Governance, Risk and Compliance (IT GRC), Programme Management, Internal Audit, Compliance and Technology teams, the specialist will maintain assurance records, perform control testing, identify evidence gaps and provide documented recommendations on remediation closure. The position requires strong analytical judgment, independent challenge, technical control knowledge and the ability to communicate assurance findings clearly to stakeholders.

• Independently review remediation evidence submitted by first-line Technology and control owners.
• Assess evidence for completeness, correctness, relevance and traceability.
• Evaluate whether submitted documentation adequately supports claimed remediation outcomes.
• Review control design, implementation and operating effectiveness against applicable requirements.
• Identify unsupported conclusions, incomplete remediation activities and control weaknesses.
• Maintain independence when assessing first-line remediation and closure recommendations.
• Document assurance conclusions, assessment limitations and residual risks.

• Assess technology policies, procedures and documented control designs.
• Review control implementation evidence and relevant management approvals.
• Evaluate operating evidence to determine whether controls function as intended.
• Conduct sample-based testing of selected controls and supporting records.
• Perform walkthroughs with relevant control owners to understand control operation.
• Identify differences between documented control requirements and actual operating practices.
• Record testing results, exceptions and supporting evidence in assurance work papers.

• Review remediation activities arising from regulatory assessments and audit findings.
• Evaluate closure packs for completeness and supporting evidence.
• Verify that remediation documentation addresses the underlying control findings.
• Identify outstanding evidence, incomplete actions and unresolved control deficiencies.
• Prepare evidence-based recommendations regarding remediation closure.
• Track dependencies and risks that may affect closure readiness.
• Document residual risks and limitations where remediation evidence does not fully support closure.
• Coordinate outstanding requirements with relevant programme and control stakeholders.

• Develop and maintain assurance plans covering assigned control reviews and remediation activities.
• Prepare evidence requests and coordinate supporting documentation.
• Maintain assurance work papers, testing records and assessment findings.
• Record review outcomes and associated closure recommendations.
• Maintain traceable links between findings, remediation actions and supporting evidence.
• Ensure assurance documentation is accurate, organised and suitable for subsequent review.
• Maintain records of unresolved issues and required follow-up activities.

• Identify missing, incomplete or inconsistent remediation evidence.
• Track overdue evidence requests and outstanding corrective actions.
• Monitor dependencies affecting assurance completion and remediation closure.
• Maintain visibility of unresolved findings and associated technology risks.
• Escalate significant evidence gaps and control concerns through appropriate channels.
• Follow up with responsible stakeholders on outstanding documentation and actions.
• Record the status of findings,…