We are looking for Associates / Senior Associates with hands-on experience in IT Control Testing, IT Audit, Technology Risk Management or Technology Controls Assurance. The candidate will be responsible for executing IT control testing activities across various technology and cybersecurity domains. The role involves performing control walkthroughs, Design Effectiveness (ToD) and Operating Effectiveness (ToE) testing, evidence validation, workpaper preparation, identifying control gaps and maintaining audit-ready documentation. The ideal candidate should have practical experience in independently executing IT control testing activities and a strong understanding of IT risks, controls, testing methodologies and audit documentation.

Key Responsibilities
- Conduct IT control walkthroughs with business and technology stakeholders.
- Understand IT risks, control objectives, control descriptions and control activities.
- Perform Design Effectiveness (ToD) testing to assess whether controls are appropriately designed to mitigate identified risks.
- Perform Operating Effectiveness (ToE) testing to validate whether controls are operating consistently and effectively.
- Execute testing based on defined methodologies, testing procedures and sampling requirements.
- Review and validate evidence provided by control owners.
- Assess evidence for relevance, completeness, accuracy, sufficiency and traceability.
- Identify control deficiencies, exceptions and gaps during testing.
- Prepare and maintain audit-ready testing workpapers.
- Document testing procedures, evidence reviewed, test results and conclusions.
- Prepare and update IT process narratives and control documentation.
- Discuss testing observations with stakeholders and support remediation tracking.
- Maintain control testing trackers, status reports and testing timelines.




- Incorporate quality assurance and review feedback into testing documentation. Technology Risk & Control Areas Candidates should have hands-on experience in one or more of the following areas:
- IT General Controls (ITGC): User Access Management, Privileged Access Management, Change Management and IT Operations.
- Identity & Access Management: User provisioning, de-provisioning, access reviews and privileged access controls.
- Change Management: Change approvals, testing, implementation and segregation of duties.
- IT Operations: Backup and recovery, batch monitoring, incident management and job scheduling.
- Infrastructure Controls: Server, operating system and infrastructure security controls.
- Database Controls: Database access, privileged accounts and database security.
- Application Controls: Application access, configuration and automated controls.
- Cybersecurity Controls: Information security policies, vulnerability management and security monitoring.
- Network & Endpoint Security: Network access, firewall controls and endpoint protection.
- Cloud & Data Security: Cloud access management, data protection and security controls. Required Skills & Qualifications
- 2-5 years of experience in IT Control Testing, IT Audit, Technology Risk or IT Controls Assurance.
- Hands-on experience in Design Effectiveness (ToD) and Operating Effectiveness (ToE) testing.
- Solid understanding of IT General Controls (ITGC) and technology risk concepts.
- Experience conducting control walkthroughs and executing testing procedures.




- Knowledge of control testing methodologies and sampling techniques.
- Ability to review, validate and assess control evidence.
- Experience preparing audit workpapers and documenting testing conclusions.
- Ability to identify control gaps, exceptions and deficiencies.
- Strong analytical, documentation and stakeholder management skills.
- Good written and verbal communication skills. Preferred Qualifications
- Exposure to frameworks such as COBIT, NIST, ISO 27001 and related IT control frameworks.
- Experience in Banking, Financial Services or other regulated industries.
- Exposure to multiple technology risk domains, including ITGC, Infrastructure, Application and Cybersecurity controls.
- Experience working with internal audit, external audit or risk assurance teams. What We Are Looking For We are looking for execution-oriented IT Control Testing professionals who can independently manage the testing lifecycle: Control Walkthrough Risk & Control Understanding ToD Testing ToE Testing Evidence Validation Workpaper Documentation Exception Identification Review & Closure Candidates whose experience is limited to IT operations, system administration or general IT support without hands-on control testing experience may not be suitable. Work Location & Shift Requirements
- Strictly Work From Office.
- Candidates must be comfortable working from the designated office location on all working days.
- Shift: 5:30 PM 2:30 AM IST.
- Monday to Friday working schedule.
- Flexibility to support business requirements, if needed. *Anaptyss has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status*

📌 IT Control Tester (Delhi)
🏢 NLB Services
📍 Delhi