Technology Risk Management Control Testing

KEY RESPONSIBILITIES

• Conduct control walkthroughs with business and technology stakeholders.
  • Understand risk, control objectives, control narratives, and testing requirements.
  • Execute ToD and ToE testing based on defined methodologies and sampling requirements.
  • Review control-owner evidence for relevance, sufficiency, completeness, and traceability.
  • Prepare and maintain audit-ready testing workpapers.
  • Document testing procedures, evidence reviewed, results, and conclusions.
  • Identify and document control gaps, exceptions, and observations.
  • Discuss observations with stakeholders and track remediation.
  • Maintain testing trackers, work queues, status reports, backlog, and aging items.
  • Incorporate QA/reviewer feedback and maintain consistency in testing conclusions.
  • Support management reporting and audit-readiness activities.

RELEVANT TECHNOLOGY RISK AREAS

Candidates with experience in one or more of the following are relevant:

IT General Controls (ITGC)
Infrastructure & Platform Controls
Database Controls
Application Controls
Technology Operations
Technology Risk Management
Cybersecurity / Information Security Controls
Identity & Access Management
Network / Endpoint Security
Application Security
Cloud / Data Security
Security Operations

REQUIRED SKILLS

• 25 years of relevant experience in Technology Risk / IT Audit / IT Controls Testing / Technology Controls Assurance.
  • Hands-on experience with ToD & ToE testing.
  • Strong understanding of control testing methodology and sampling.
  • Ability to interpret control narratives and execute appropriate testing procedures.
  • Experience in evidence validation and sufficiency assessment.
  • Strong workpaper preparation and documentation skills.
  • Ability to identify and communicate control exceptions and gaps.
  • Good understanding of risk and control concepts.
  • Strong written and verbal communication skills.
  • Comfortable working with both business and technology stakeholders.

GOOD TO HAVE

Knowledge/exposure to:

COBIT | NIST | ISO 27001 | Banking / BFSI | Cyber Risk | Cloud Security | IAM | Technology Controls

IDEAL CANDIDATE

We are specifically looking for an execution-oriented Control Tester, not candidates whose experience is limited to IT operations/support.

The candidate should be able to independently manage the testing lifecycle:

Control Walkthrough Understand Risk & Control ToD / ToE Testing Evidence Validation Document Results Identify Exceptions Complete Workpaper Incorporate Review Feedback

Interested candidates can share their updated CV at:
[[email protected]]

Immediate / Short Notice candidates preferred.