Control Testing Specialist

As a Controls Testing Specialist you will be responsible for supporting and maintaining cyber security processes and practices to support us in mitigating security risks and vulnerabilities.This is a full time permanent role due to an internal promotion.What's in it for you?RAC recognises the value of flexible working arrangements to help you achieve a balance between work responsibilities and personal commitments. We are also embracing a hybrid work approach supporting a mix of on site and remote working where applicableBe part of a growing team, enabling career growth and have job security in a permeant roleLots of training and free certification programs – we support and pay for your learning – If you have a growth mindset RAC is the place for you!Latest and greatest technology – A leading Microsoft Partner here in WA with the largest Azure cloud footprint of any WA companyBe part of a growing team and be involved in team with a great cultureWorking in an environment that is embracing a continuous improvement culture using experimentation to support learningGain RAC Staff Benefits including free Roadside Assistance and 25% discount on your Insurances, Social Club, access to Fitness Passport for cheaper gym memberships and much much more!Help give back to WA with a leading WA brand supporting things such as RAC helicoptersWhat will you be doing?

• Creating customised testing methodologies and testing templates

Mapping, testing and documenting processes of assigned controls and identify the main control components within that end-to-end process and raise issues as appropriate then perform issue closure validation to ensure risks are sustainably remediated againstReviewing and recommend effective security of RAC's information systems and networks, in accordance with applicable legislation (e.g. Privacy, APRA) and aligned with industry standards (e.g. ISO27001, CIS, NIST CSF)Ensuring that assigned control assessments are delivered on time, in accordance with the Controls Assurance assessment planIdentifying activities that operate without a key control defined and the risk associated with such activitiesEnsuring agreed information security processes are implemented, monitored and reviewed regularly to meet regulatory compliance and audit requirementsTracking technology and cyber related audit findings and ensuring a timely responses to address Information Security audit action itemsMaintaining and monitoring compliance of security policies, procedures and standardsWhat are we looking for in you?Experience in Testing – Software, Infrastructure, CyberExperience in Information SecurityDemonstrable knowledge in operational risk management, internal control, or internal audit preferably within a banking and / or IT FunctionExperience in working in a governance or security team is desirableAbout RAC
As an Equal Opportunity Employer, RAC values inclusivity and promotes a workplace that actively seeks to welcome contributions from all people. If you need assistance or adjustments or would like to note which pronouns you use to fully participate in the application or interview process, please contact our Jason Crooks at the RAC Talent Team.