IT Compliance Support Engineer

My client is seeking to recruit an IT Compliance Support Engineer on an initial 6-month contract for a Banking client based in London (hybrid, 3 days pw onsite).

Role Purpose:

You will join the client development team and act as the primary liaison with internal/external audit, compliance, and IT security counterparts. This role combines governance with technical capability-supporting audits, demonstrating IT controls, and troubleshooting or coordinating resolution of issues across Azure Dev Ops pipelines, Service Now change management, and Jira requirement workflows. You will help us evidence good practice, reduce audit friction, and improve developer productivity by ensuring our controls are both effective and practical.

Role Tasks:

Audit & Compliance Liaison

• Act as the single point of contact for internal/external audit, compliance, and IT security.
• Handle audit requests, walkthroughs, and create timely evidence (C# source code, SQL scripts, server config, Azure Dev Ops logs, Service Now change records, Jira artefacts).
• Maintain an audit-ready repository of artefacts and narratives (control matrices, process maps, and access log review).

Interpret Technical Details for Auditors

• Ability to understand C# code and SQL scripts to verify logic and queries.
• Interpret permissions (Windows, Azure AD, Azure Dev Ops) and explain them clearly to auditors.
• Translate technical details into auditor-friendly narratives.

IT Controls & Governance

• Operate and improve general IT controls (GITC) across change management, access control, backups/recovery, incident/problem management.
• Ensure segregation of duties, peer reviews, approvals, and traceability for production changes.
• Embed controls within Azure Dev Ops pipelines (e.g., gated approvals, policy enforcement).

Evidence & Documentation

• Create and maintain clear documentation: SOPs, control narratives, diagrams, audit evidence packs.

Support Risk Assessments

• Assist or act on behalf of the Application Service Owner in completing required risk and compliance assessments (e.g., security, operational resilience, regulatory checks) as per internal governance standards and workflows.
• Ensure timely submission of assessment artefacts and coordinate with relevant stakeholders for approvals and remediation actions