Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Risk & Audit Lead role.
Rezi rewrites your resume against KAST's job description. Free.
Tailor your resume to this Risk & Audit Lead role.
Rezi rewrites your resume against KAST's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Risk & Audit Lead posting at KAST — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Risk & Audit Lead posting at KAST — free, in seconds.
About the Role
We are seeking a Risk & Audit Lead to establish and manage an independent risk and audit function for KAST, encompassing the entire organization, not solely technology.
Responsibilities
- Build and operate an independent, enterprise-wide risk and audit function.
- Own the enterprise risk framework, identifying, assessing, and tracking risks across all business areas.
- Define and execute risk management activities, including Risk and Control Self Assessment (RCSA) and Key Risk Indicators (KRIs).
- Lead internal audit activities enterprise-wide, managing the full audit lifecycle, including reporting and closure of findings.
- Provide independent validation of existing controls and compliance efforts.
- Review and assess security and technology controls, systems, policies, and processes.
- Evaluate cybersecurity practices, identify risks and gaps, and ensure appropriate testing and remediation.
- Manage enterprise resilience practices, including business continuity and disaster recovery (BCP/DR) and business impact assessments.
- Conduct annual BCP and DR exercises.
- Collaborate with various departments to address risks and enhance controls while maintaining independence.
- Develop and maintain risk and audit frameworks, policies, and processes.
- Deliver regular risk and audit updates to the leadership team.
Requirements
- 8+ years of experience in risk, audit, cybersecurity, or controls with an enterprise-wide perspective.
- Strong understanding of enterprise risk management, information security, and technology risk.
- Experience auditing business and technology environments and identifying control gaps.
- Proven experience leading organizations through compliance certification projects (e.g., ISO, SOC 2, PCI DSS).
- Good understanding of access management, data controls, secrets/API keys, and security testing.
- Strong stakeholder management skills, with the ability to engage senior leaders, auditors, and regulators independently.
- Experience in fintech or payment companies is a significant advantage.
Skills
- Risk Management
- Auditing
- Cybersecurity
- Controls Assessment
- Enterprise Risk Management
- Information Security Risk
- Technology Risk
- Compliance Certification (ISO, SOC 2, PCI DSS)
- Access Management
- Data Controls
- Security Testing
- Stakeholder Management
- Business Continuity Planning (BCP)
- Disaster Recovery (DR)
Location
- London
Work Type
- Full Time
Experience Level
- 8+ years
About the Company
- KAST is an organization where this role will build and own an independent risk and audit function.