The Firm have recently undergone a successful IPO and throughout which a significant evaluation and assessment of their technology estate and competence was made. The output of this gave recommendation for a control framework for IT controls and compliance – which are to be implemented and maintained. Additionally, as the business grows there exists an ongoing demand for various control focussed projects to ensure robust and compliant security within the groups IT applications.
Defined pieces of work will include:
- Implementation of recommended control framework from external audit partner (34 controls identified)
- IT policy review (in partnership with virtual CISO)
- Deployment of Hello for business biometrics and 2FA
- Completion of CIS security benchmark deployment and compliance monitoring (with 3rd party Azure support team)
- Removal and replacement of legacy VPN provider
The projects listed need immediate ownership, oversight and management to strict deadlines, which are fast approaching. The projects in scope will likely be added to with other pieces of defined work linked to operational and IT risk over the duration of the assignment.
