IT Risk & Compliance Engineer – DevOps, Agile
Summary
Oversee IT risk controls, automate manual processes, and ensure compliance with SOX/ITGC/DORA in Agile/DevOps environments.
- Coordinate IT risk control execution and act as SPOC for audits and evidence submission
- Monitor control performance, risk indicators, and execution timelines
- Identify, assess, and manage IT risks across systems and processes
- Ensure compliance with internal frameworks and regulations (e.g. SOX, ITGC, DORA)
- Support audits (SOX/ITGC) and coordinate evidence collection with stakeholders
- Drive automation of manual controls and improve efficiency of risk processes
- Collaborate with DevOps, engineering, and business teams to embed risk and security controls
- Translate technical topics into clear risk and control documentation
- Develop dashboards and reports to provide visibility on risk and control performance
- Work in Agile/SCRUM environments and support multiple workstreams
Requirements
- Experience in IT Risk, IT Security, IT Compliance, IT Controls, or IT Audit
- Strong understanding of risk frameworks and regulatory requirements
- Experience working with IT, Engineering, and Risk stakeholders
- Strong analytical and communication skills, with ability to challenge and influence
- Experience in Agile/DevOps environments
- Ability to manage multiple priorities
- English at minimum B2 level
- Certifications (nice to have): ISC2 Cyber Security, Project Management (PMP), White/Blue Security Champion (ING certifications)
Core Competencies
Demonstrates expertise in IT Risk Management, IT Compliance, and IT Audit, with a strong focus on regulatory frameworks such as SOX and ITGC. Proficient in collaborating with cross-functional teams to enhance risk control processes and drive automation in Agile/SCRUM environments.
Highest-signal resume keywords
- IT Risk Management
- IT Compliance
- SOX Compliance
- Agile/SCRUM Experience
- Risk Frameworks
ATS Optimization Keywords
Hard Skills
- IT Risk
- IT Security
- IT Controls
- IT Audit
- Risk Assessment
- Control Performance Monitoring
- Automation of Controls
- Dashboard Development
- Risk Documentation
- Regulatory Compliance
Soft Skills
- Analytical Skills
- Communication Skills
- Influencing Skills
- Prioritization Skills
Certifications & Qualifications
- ISC2 Cyber Security
- Project Management (PMP)
- White/Blue Security Champion
Industry Keywords
- SOX
- ITGC
- DORA
- Risk Indicators
- Stakeholder Collaboration
Tools & Technologies
- DevOps
- Agile Methodologies