KEY RESPONSIBILITIES

- Conduct control walkthroughs with business and technology stakeholders.
- Understand risk, control objectives, control narratives, and testing requirements.
- Execute ToD and ToE testing based on defined methodologies and sampling requirements.
- Review control-owner evidence for relevance, sufficiency, completeness, and traceability.
- Prepare and maintain audit-ready testing workpapers.
- Document testing procedures, evidence reviewed, results, and conclusions.
- Identify and document control gaps, exceptions, and observations.
- Discuss observations with stakeholders and track remediation.
- Maintain testing trackers, work queues, status reports, backlog, and aging items.
- Incorporate QA/reviewer feedback and maintain consistency in testing conclusions.

• Support management reporting and audit-readiness activities.

RELEVANT TECHNOLOGY RISK AREAS Candidates with experience in one or more of the following are relevant:

IT General Controls (ITGC)

Infrastructure & Platform Controls

Database Controls

Application Controls

Technology Operations

Technology Risk Management

Cybersecurity / Information Security Controls

Identity & Access Management

Network / Endpoint Security

Application Security

Cloud / Data Security

Security Operations

REQUIRED SKILLS





- 25 years of relevant experience in Technology Risk / IT Audit / IT Controls Testing / Technology Controls Assurance.
- Hands-on experience with ToD & ToE testing.
- Strong understanding of control testing methodology and sampling.
- Ability to interpret control narratives and execute appropriate testing procedures.
- Experience in evidence validation and sufficiency assessment.
- Robust workpaper preparation and documentation skills.
- Ability to identify and communicate control exceptions and gaps.
- Good understanding of risk and control concepts.
- Strong written and verbal communication skills.

• Comfortable working with both business and technology stakeholders.

GOOD TO HAVE

Knowledge/exposure to

COBIT | NIST | ISO 27001 | Banking / BFSI | Cyber Risk | Cloud Security | IAM | Technology Controls

IDEAL CANDIDATE

We are specifically looking for an execution-oriented Control Tester, not candidates whose experience is limited to IT operations/support.

The candidate should be able to independently manage the testing lifecycle:

Control Walkthrough Understand Risk & Control ToD / ToE Testing Evidence Validation Document Results Identify Exceptions Complete Workpaper Incorporate Review Feedback

Interested candidates can share their updated CV at:

[[email protected]]

Immediate / Short Notice candidates preferred.

📌 Technology Risk Management Control Testing (Greater Noida)
🏢 NLB Services
📍 Greater Noida