KEY RESPONSIBILITIES

- Conduct control walkthroughs with business and technology stakeholders.
• Understand risk, control objectives, control narratives, and testing requirements.
• Execute ToD and ToE testing based on defined methodologies and sampling requirements.
• Review control-owner evidence for relevance, sufficiency, completeness, and traceability.
• Prepare and maintain audit-ready testing workpapers.
• Document testing procedures, evidence reviewed, results, and conclusions.
• Identify and document control gaps, exceptions, and observations.
• Discuss observations with stakeholders and track remediation.
• Maintain testing trackers, work queues, status reports, backlog, and aging items.
• Incorporate QA/reviewer feedback and maintain consistency in testing conclusions.
• Support management reporting and audit-readiness activities.

RELEVANT TECHNOLOGY RISK AREAS

Candidates with experience in one or more of the following are relevant:

IT General Controls (ITGC)
Infrastructure & Platform Controls
Database Controls
Application Controls
Technology Operations
Technology Risk Management
Cybersecurity / Information Security Controls
Identity & Access Management
Network / Endpoint Security
Application Security
Cloud / Data Security
Security Operations

REQUIRED SKILLS





- 25 years of relevant experience in Technology Risk / IT Audit / IT Controls Testing / Technology Controls Assurance.
• Hands-on experience with ToD & ToE testing.
• Robust understanding of control testing methodology and sampling.
• Ability to interpret control narratives and execute appropriate testing procedures.
• Experience in evidence validation and sufficiency assessment.
• Strong workpaper preparation and documentation skills.
• Ability to identify and communicate control exceptions and gaps.
• Good understanding of risk and control concepts.
• Strong written and verbal communication skills.
• Comfortable working with both business and technology stakeholders.

GOOD TO HAVE

Knowledge/exposure to:

COBIT | NIST | ISO 27001 | Banking / BFSI | Cyber Risk | Cloud Security | IAM | Technology Controls

IDEAL CANDIDATE

We are specifically looking for an execution-oriented Control Tester, not candidates whose experience is limited to IT operations/support.

The candidate should be able to independently manage the testing lifecycle:

Control Walkthrough Understand Risk & Control ToD / ToE Testing Evidence Validation Document Results Identify Exceptions Complete Workpaper Incorporate Review Feedback

Interested candidates can share their updated CV at:
[[email protected]]

Immediate / Short Notice candidates preferred.

📌 Technology Risk Management Control Testing (Noida)
🏢 NLB Services
📍 Noida