About this role
IDT Assurance Advisor
Where You Fit In?
- As the energy industry transitions to cleaner forms of energy, Shell is actively leveraging technology across its business. This exposes us to risk in Information security and regulatory requirements that come along with it.
- IDT Assurance Advisors play a vital role in ensuring compliance with IRM policies and standards.
- This role involves managing operational responsibilities related to IT controls, delivering assurance services, leading improvement projects, and championing risk management initiatives.
- Effective collaboration with stakeholders, managing impact from Shell-wide projects, and staying informed about internal policies and external risks are key challenges.
If you are interested in Information Risk Management (IRM) and desire to sit into the driver’s seat where we provide assurance to the organization on the risks we carry in IT world, Enterprise Assurance Services (EAS) is the team you would want to be in. Join our EAS team, where it is a great opportunity for those looking to develop IT Risk review/audit skills.
What is the Role?
As an IDT Assurance Advisor, you play a key role in strengthening the organization's IT risk and control environment through independent assurance, risk oversight, and control testing activities. You will conduct comprehensive risk management reviews, identify gaps, and meticulously track remediation progress, assess the design and operating effectiveness of IT controls, identify and report control weaknesses, and provide strategic guidance to stakeholders on risk management and governance practices.
Your key responsibilities include:
- Risk Oversight & Assurance Planning: Lead IT assurance reviews across infrastructure, applications, and cybersecurity domains, ensuring alignment with enterprise risk management objectives.
- Quality Review: Review ITGC and ITC testing for quality, completeness, and correctness of outcome.
- ITGC Testing: Conduct testing of IT General Controls (ITGCs) and ITAC to ensure compliance and effectiveness.
- Test Scripts: Developing and executing test scripts, documenting test procedures, and evaluating results to identify control gaps.
- Reporting: Ensure adherence to the approved assurance plan and provide regular updates on progress.
- Issue Management: Review quality of remediation and documentation of the same before issue closure.
- Process & Policy Governance: Oversee the evaluation of IT processes, policies, and standards to ensure compliance with regulatory requirements and industry frameworks (e.g., ISO 27001, NIST, COBIT).
- Strategic Advisory: Prov