Technology Consultant (Resilience, PAM & IAM)

Talan is supporting a key client in delivering a critical remediation programme focused on strengthening underperforming technology controls. We are seeking an experienced Technology Consultant to drive improvements across control design and operating effectiveness. Contract with strong chance of extensions Location - London On-Prem 4 days per week This role will play a central part in enhancing controls related to: - Operational Resilience - Privileged Access Management (PAM) - Identity & Access Management (IAM) You will work closely with technology, risk, and audit stakeholders to ensure remediation activities are clearly defined, executed effectively, and evidenced to a high standard. Key Responsibilities Control Assessment & Diagnosis - Review underperforming controls to identify: - Root causes - Design deficiencies - Operating effectiveness gaps - Assess whether current control designs are fit for purpose and aligned with regulatory expectations Remediation Planning & Execution - Define structured remediation plans, including: - Actions - Ownership - Milestones - Evidence requirements - Drive delivery of remediation activities in collaboration with control owners and SMEs Stakeholder Engagement - Partner with: - Technology and engineering teams - Risk & compliance functions - Internal audit and assurance stakeholders - Provide constructive challenge to ensure robust and sustainable control improvements Control Framework Enhancement - Support optimisation of control operating models, including: - Control frequency - Evidence standards - Accountability models - Governance processes - Embed consistent control discipline across resilience, PAM, and IAM domains Governance & Reporting - Track remediation progress and proactively escalate: - Risks - Blockers - Overdue actions - Produce clear, concise reporting for: - Senior stakeholders - Governance forums - Review remediation evidence to confirm completeness and sustainability Audit & Assurance Readiness - Support preparation for: - Control testing - Internal/external audit - Regulatory reviews - Ensure remediation outcomes are defensible and audit-ready Essential Experience - Proven experience in one or more of the following: - Technology Risk / IT Controls - Cyber Risk - IT Audit - Operational Resilience - Strong track record delivering control remediation in: - Financial services - Banking - Regulated environments - Experience assessing: - Control design effectiveness - Operating effectiveness - Familiarity with: - Risk & Control Self-Assessments (RCSA) - Audit findings and issue management - Assurance and regulatory reviews - Demonstrated ability to manage remediation lifecycle from identification through to closure Operational Resilience - Understanding of: - Critical business services - Disaster recovery & business continuity - Technology recovery controls - Experience with: - Resilience testing evidence - Impact tolerances - Recovery plans & continuity procedures Privileged Access Management (PAM) - Knowledge of: - Privileged account governance - Joiner-Mover-Leaver processes - Access recertification and reviews - Exposure to: - PAM tooling (e.g. vaulting solutions) - Break-glass access - Session monitoring - Privileged account ownership models Identity & Access Management (IAM) - Experience with: - Access provisioning & de-provisioning - Role-based access controls (RBAC) - Segregation of duties (SoD) - Strong understanding of: - Access reviews and governance - IAM control testing - Leaver controls Key Skills & Attributes - Strong analytical capability in control assessment and remediation design - Ability to translate complex control issues into practical, actionable solutions - Excellent stakeholder management across technical and non-technical audiences - High-quality written communication, including senior-level reporting - Confident in constructively challenging control owners - Comfortable operating in ambiguous, fast-paced environments - Strong attention to detail, particularly in reviewing remediation evidence