Control Testing Analyst

Job Description

We are seeking a highly motivated Control Testing Analyst with hands-on experience in IT General Controls (ITGC) and IT Application Controls (ITAC) testing within the Information Security and Technology Risk Management domain. The ideal candidate should have experience supporting risk, compliance, audit, or control assurance programs for organizations in the Banking, Financial Services, or Cards industry.

The role involves assessing the design and operating effectiveness of technology controls, identifying control gaps, and supporting remediation efforts to strengthen the organization's risk and compliance posture

͏

Key Responsibilities

• Execute ITGC and ITAC testing activities in accordance with established testing methodologies and regulatory requirements.
• Perform control design and operating effectiveness testing across key technology processes such as:
• User Access Management
• Privileged Access Management
• Change Management
• Incident Management
• Backup & Recovery
• Job Scheduling and Operations
• Interface and Automated Application Controls
• Review control evidence, document test results, and identify control deficiencies.
• Assess risks associated with control gaps and support remediation tracking and validation.
• Collaborate with technology, security, audit, compliance, and business stakeholders during control reviews.
• Prepare testing workpapers, findings reports, and management summaries.
• Support internal audits, external audits, and regulatory examinations.
• Utilize data analytics techniques to improve testing effectiveness and coverage.
• Contribute to automation initiatives for control testing and continuous monitoring.

͏

Mandatory Skills & Experience

• 3+ years of relevant experience in one or more of below:
• Technology Risk Management
• IT Audit
• Risk & Compliance
• Controls Assurance
• Hands-on experience performing ITGC and/or ITAC Control Testing.
• Good understanding of technology risk and control frameworks, including:
• COBIT
• NIST
• ISO 27001
• SOX IT Controls
• Experience in documenting testing procedures, evaluating evidence, and reporting findings.
• Strong understanding of application, infrastructure, and security controls.
• Experience working with Banking, Financial Services, or Cards industry clients.
• Strong analytical, problem-solving, and stakeholder management skills.
• Excellent verbal and written communication skills.

͏

Preferred Skills

• Experience in AI-enabled Risk Management or Control Testing Automation.
• Exposure to Continuous Controls Monitoring (CCM) and Intelligent Automation solutions.
• Experience working with Archer GRC platform.
• Experience in Data Analytics tools such as:
• Power BI
• SQL
• Alteryx
• Tableau
• Advanced proficiency in Microsoft Office Suite (Excel, PowerPoint, Word).
• Exposure to cloud security controls (Azure, AWS, GCP) is an advantage.

• CISA
• CRISC
• ISO 27001 Lead Auditor / Lead Implementer
• Security+, CISSP (preferred but not mandatory)

͏

Deliver