We are looking for an experienced Internal Control Assurance Manager with a strong focus on IT to join the Internal Control Assurance & Reporting (ICAR) team.
The role will be responsible for performing and reviewing internal control testing across Information Technology and Cyber Security, assessing control design and operating effectiveness, identifying control gaps, and communicating findings to key stakeholders.
Key Responsibilities
- Perform and review IT internal control testing covering design and operating effectiveness.
- Strong hands-on experience in ITGC and/or ITAS testing is required.
- Test controls across areas such as Identity & Access Management, Change Management, Incident Management, Backup, Continuity Management and Cyber Security.
- Document testing procedures, control observations and findings and present them to relevant stakeholders.
- Support planning, execution and reporting of internal control assurance cycles.
- Provide guidance and mentoring to team members.
- Work closely with Internal Audit, Risk, Governance, External Audit and business stakeholders.
- Develop and maintain automated control testing solutions using data analytics and automation.
- Identify control weaknesses and contribute to strengthening the overall IT control framework.
Mandatory Skills
- 10+ years of experience in IT Assurance / IT Internal Audit / IT Risk & Controls / IT Control Testing.
- Strong hands-on experience in ITGC and/or ITAS testing.
- Valuable understanding of IT risk and control frameworks.
- Experience in control design and operating effectiveness testing.
- Strong stakeholder management and communication skills.
- Ability to independently manage assurance/testing assignments.
Good to Have
- SQL and relational databases
- Data Analytics and Visualization
- Python / R
- Tableau / Palantir Foundry or similar tools
- Cloud Security
- DevSecOps
- AI Governance / AI Audit
- SOX / IT controls experience
- CISA / CISM / CISSP / CIA / CRISC or similar certification
Note: Skilled certification is not mandatory.
Candidate Profile
Candidates from backgrounds such as IT Internal Audit, IT Assurance, ITGC, ITAS, IT Risk & Controls, SOX IT Controls, Technology Risk or Internal Control Testing are relevant for this position.
Candidates should have robust experience in ITGC / ITAS testing and internal control assurance. Data analytics, SQL, programming and automation skills will be an added advantage.
Notice Period: Candidates available within 30 days preferred.
Expected Joining: October / November, preferably by the first week of November.