Technology Risk Assurance Advisor

Xero is a beautiful, easy-to-use platform that helps small businesses and their accounting and bookkeeping advisors grow and thrive.

At Xero, our purpose is to make life better for people in small business, their advisors, and communities around the world. This purpose sits at the centre of everything we do. We support our people to do the best work of their lives so that they can help small businesses succeed through better tools, information and connections. Because when they succeed they make a difference, and when millions of small businesses are making a difference, the world is a more beautiful place.

**How you’ll make an impact**

In this role you will report to the GM Assurance, to support and assist in the delivery of the Assurance plan to ensure Xero is appropriately positioned through its next exciting stage of growth. The purpose of the role is to provide the Audit and Risk Management Committee of the Board and the Executive team with assurance on the adequacy and effectiveness of controls, with a particular focus on our IT controls, to ensure risks are managed appropriately. You’ll help Xero protect and create value and provide beautiful insights to drive actions and change to improve the business.

**What you’ll do**:

- Assist in the delivery of the ISO27001 assurance plan which is a requirement under the ISO27001 standard to ensure Xero has best practice security management processes in place
- Assist in the delivery of the risk-based Assurance Work Plan which is approved by the Audit and Risk Committee, and is designed to effectively gauge the efficiency and effectiveness of Xero’s systems and controls
- Identify and make recommendations on systems and business process re-engineering opportunities
- Identify and report on areas of weaknesses in internal controls and processes, including recommendation of remediatory action for streamlining and/or improvement
- Lead and assist in the follow up of recommendations to ensure the business are making improvements and/or remediating control deficiencies
- Assist in the delivery of requests from the business for specialised audits/reviews
- Encourage an understanding of the role of Risk and Assurance within the organisation

**What you’ll bring with you**:

- Tertiary qualifications with at least 2-4 years experience performing Audit related activities
- Experience working in big-4 CA firms and/or a large corporate environment
- Experience and understanding of IT processes including operations, security, configuration, change, incident, problem and disaster recovery management
- Experience in planning and conducting audits in accordance with compliance requirements and risk and control framework, particularly ISO 27001
- Strong relationship building skills with the ability to work effectively both individually and as part of a team
- Ability to quickly understand specific business environment and business challenges
- Innovative and keen to create solutions to problems. An ability to think outside the square in terms of identifying ways to improve existing systems and processes
- Xero is a Rainbow Tick certified employer._
- Please note that we currently require all employees and contractors to be vaccinated against COVID-19 in order to work from a Xero office, or engage in any face-to-face Xero business. Xero will work with anyone who is not vaccinated, or prefers not to disclose their vaccination status, to determine if any reasonable accommodations can be provided to ensure their role can be performed safely whilst the restriction is in place._