Job Description

Posted 4 weeks ago

IT Compliance Support Engineer – Hybrid / Canary Wharf – 6 month Contract – Banking

Tier 1 Bank – Regulatory Reporting Team

Role – IT Compliance Support Engineer

Duration – 6 months with very likely extension

Location – Hybrid / Canary Wharf – 3 days per week in a Canary Wharf office

Rate – £415 per day (Inside IR35)

Role

IT Compliance Support Engineer to join a development team and act as the primary liaison with internal/external audit, compliance, and IT security counterparts. This role combines governance with technical capability-supporting audits, demonstrating IT controls, and troubleshooting or coordinating resolution of issues across Azure DevOps pipelines, ServiceNow change management, and Jira requirement workflows. You will help us evidence good practice, reduce audit friction, and improve developer productivity by ensuring our controls are both effective and practical.Tasks

Audit & Compliance Liaison

Act as the single point of contact for internal/external audit, compliance, and IT security.
Handle audit requests, walkthroughs, and create timely evidence (C# source code, SQL scripts, server config, Azure DevOps logs, ServiceNow change records, Jira artefacts).
Maintain an audit-ready repository of artefacts and narratives (control matrices, process maps, and access log review).Interpret Technical Details for Auditors

Ability to understand C# code and SQL scripts to verify logic and queries.
Interpret permissions (Windows, Azure AD, Azure DevOps) and explain them clearly to auditors.
Translate technical details into auditor-friendly narratives.IT Controls & Governance

Operate and improve general IT controls (GITC) across change management, access control, backups/recovery, incident/problem management.
Ensure segregation of duties, peer reviews, approvals, and traceability for production changes.
Embed controls within Azure DevOps pipelines (e.g., gated approvals, policy enforcement).Evidence & Documentation

Create and maintain clear documentation: SOPs, control narratives, diagrams, audit evidence packs.Support Risk Assessments

Assist or act on behalf of the Application Service Owner in completing required risk and compliance assessments (e.g., security, operational resilience, regulatory checks) as per internal governance standards and workflows.
Ensure timely submission of assessment artefacts and coordinate with relevant stakeholders for approvals and remediation actions.Coordinate Audit/Assessment/Security Defect Remediation

Track and manage remediation of audit findings, control gaps, and assessment defects.
Work with developers, platform teams, and risk owners to ensure timely closure and evidence of remediation.
Provide regular status updates to stakeholders and maintain defect logs for audit readiness.

GCS is acting as an Employment Business in relation to this vacancy