It Asset Management Risk And Control Analyst

Responsibilities

• Oversee ITAM standards and control requirements across the firm, ensuring alignment with related processes and procedures.
• Identify gaps, deficiencies, or inconsistencies between ITAM control requirements and documented procedures.
• Coordinate regulatory requests and external audit engagements related to ITAM.
• Track governance and ensure processes comply with control requirements.
• Prepare, collate, and distribute meeting information packs, minutes, and reports for ITAM risk committees and forums.
• Perform risk assessment and analysis:
  • Identify and evaluate potential risks and vulnerabilities in the IT asset management process.
  • Assess risks and internal control dependencies on ITAM processes by identifying non‑compliance areas and evaluating risks related to key technology control requirements.
  • Conduct risk assessments to determine impact and likelihood of asset‑related risks.
  • Provide recommendations for risk mitigation strategies and improvements.
• Implement controls:
  • Collaborate in the development and implementation of control instances and procedures with control owners related to IT asset management.
  • Ensure control compliance with industry standards, regulations, and best practices.
  • Monitor and enforce adherence to established controls.
• Manage asset inventory:
  • Continuously refine controls to ensure completeness and accuracy of the up‑to‑date inventory of all IT assets, including hardware, software, licenses, and documentation.
  • Track asset life cycles from procurement to disposal and optimize asset utilization.
  • Conduct regular verification of asset records and compliance with policies.
  • Collaborate with internal and external audit teams to facilitate IT asset audits and address findings.
• Document and report:
  • Create and maintain documentation of asset management processes, controls, and procedures.
  • Generate reports and provide insights on assets, related risks, and compliance status to management.
• Continuous improvement:
  • Identify opportunities for process optimization and efficiency improvements.
  • Recommend and implement enhancements to the IT asset management program.

• Minimum required skills
  • Undergraduate degree in Computer Science, Engineering, or related field.
  • 10 years of progressive experience in ITAM audits, risk, and compliance within global and complex financial institutions or medium‑to‑large organisations.
  • Knowledge of international regulatory frameworks and industry standards such as ISO, NIST, COBIT, and other security frameworks influencing IT asset management in the financial sector.
  • Experience working with auditors and the evidence collection process.
  • Strong understanding of ITAM best practices, standards, and regulations.
  • Proven experience in heavily regulated environments, preferably in the financial industry.
  • Excellent analytical skills and ability to interpret data to drive informed decisions.
  • Experience working with cross‑functional teams and stakeholders, including technical and non‑technical individuals.
  • Strong leadership, collaboration, and communication skills, with the ability to influence and engage stakeholders at all levels.
  • Proficiency in MS Office and other productivity applications.
• Considered an asset – Experience with Service Now; knowledge of cybersecurity principles related to asset management.
• Certifications (preferred) – CSAM, CHAMP, CAMSE, CITAD, CITAM.

TMC is an equal prospect employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.