Position: IT Compliance Support Engineer
Location: London
Contract: 6 Months Initially
Pay: £415.16 Umbrella/day
Company Overview
Leading provider of IT services to one of the major Japanese banking group in the EMEA region, supporting one of Japan's largest banks and a global financial powerhouse.
About the Role
Seeking an IT Compliance Support Engineer to join the development team and act as the primary liaison with internal/external audit, compliance, and IT security counterparts. This role combines governance with technical capability—supporting audits, demonstrating IT controls, and troubleshooting or coordinating resolution of issues across Azure DevOps pipelines, ServiceNow change management, and Jira requirement workflows. You will help us evidence good practice, reduce audit friction, and improve developer productivity by ensuring our controls are both effective and practical.
Key Responsibilities
Audit & Compliance Liaison
- Act as the single point of contact for internal/external audit, compliance, and IT security.
- Handle audit requests, walkthroughs, and create timely evidence (C# source code, SQL scripts, server config, Azure DevOps logs, ServiceNow change records, Jira artefacts).
- Maintain an audit-ready repository of artefacts and narratives (control matrices, process maps, and access log review).
Interpret Technical Details for Auditors
- Ability to understand C# code and SQL scripts to verify logic and queries.
- Interpret permissions (Windows, Azure AD, Azure DevOps) and explain them clearly to auditors.
- Translate technical details into auditor-friendly narratives.
IT Controls & Governance
- Operate and improve general IT controls (GITC) across change management, access control, backups/recovery, incident/problem management.
- Ensure segregation of duties, peer reviews, approvals, and traceability for production changes.
- Embed controls within Azure DevOps pipelines (e.g., gated approvals, policy enforcement).
Evidence & Documentation
- Create and maintain clear documentation: SOPs, control narratives, diagrams, audit evidence packs.
Support Risk Assessments
- Assist or act on behalf of the Application Service Owner in completing required risk and compliance assessments (e.g., security, operational resilience, regulatory checks) as per internal governance standards and workflows.
- Ensure timely submission of assessment artefacts and coordinate with relevant stakeholders for approvals and remediation actions.
Coordinate Audit/Assessment/Security Defect Remediation
- Track and manage remediation of audit findings, control gaps, and assessment defects.
- Work with developers, platform teams, and risk owners to ensure timely closure and evidence of remediation.
- Provide regular status updates to stakeholders and maintain defect logs for audit readiness.
Other Tasks
- Communicating with different business sections on behalf of the team to represent their interests with regard to system construction/operations. Developing a better understanding between the business and the team as a whole.
- Ensuring that the team members are following correctly the various procedures on application construction/maintenance such as Security changes, Change management requests, Software Development Life Cycle (SDLC), Service Requests (as instructed to other IT sections), Peer Code Reviews (PCR) and System access permission set ups.
- Participating in system support/operation activities to monitor and respond to operational issues in audit/security perspective to have an understanding of what happens on the actual operation floors.
- Acting on behalf of senior management and management level, in their absence, to ensure that team members carry out their tasks and responsibilities as management requires.
#J-18808-Ljbffr