Regulatory, Compliance & Controls Testing & Validation
- Analyst Same job available in 3 locations Bengaluru, Karnataka, India Chennai, Tamil Nadu, India Hyderabad, Telangana, India Position Summary Regulatory, Risk & Forensic | Testing & Validation Utility Our Regulatory, Risk & Forensic team supports client leaders to translate multifaceted risk and an evolving regulatory environment into defensible actions that help strengthen, protect, and transform organizations. Join our team and use advanced data, AI and emerging technologies with industry insights to help client service teams bring clarity from complexity and accelerate their path to value creation. The Testing & Validation Utility delivers integrated regulatory, compliance, and controls testing and validation services, along with regulatory reporting, across Controls Testing, Conformance Testing, Compliance Testing, Regulatory Reporting QA & Testing, Risk & Control Self-Assessment (RCSA) and Post-Effectiveness Testing, Issue Management & Remediation Validation, and Regulatory Reporting for global clients across industries, with a particular focus on Banking, Capital Markets, Investment Management, and Insurance. We expect our professionals to bring exposure across the end-to-end risk management lifecycle — Transactions, Conformance, Controls, Compliance, RCSA, and Issue Management — and to apply that breadth across the components they support. Position Summary Regulatory, Compliance & Controls Testing & Validation | Analyst Level: Analyst (2-4 years of relevant experience) As an Analyst within the Testing & Validation Utility at Deloitte Consulting Services, you will support execution of high-quality regulatory, compliance, and controls testing and validation activities, along with regulatory reporting, across the Regulatory, Risk & Forensic portfolio. You will deliver assigned work products within due timelines under the supervision of senior team members. About At Deloitte, we do not offer you just a job, but a career in the highly sought-after Risk Management field. We are one of the business leaders in the risk market. We work with a vision to make the world more prosperous, trustworthy, and safe. Deloitte’s clients, primarily based outside of India, are large, complex organizations that constantly evolve and innovate to build better products and services. In the process, they encounter various risks and the work we do to help them address these risks is increasingly important to their success—and to the strength of the economy and public security. By joining us, you will get to work with diverse teams of professionals who design, manage, and implement risk-centric solutions across a variety of domains. In the process, you will gain exposure to the risk-centric challenges faced in today’s world by organizations across a range of industry sectors and become subject matter experts in those areas. Work you’ll do: Our Regulatory, Risk & Forensic Operate professionals help organizations effectively navigate business risks and opportunities — from strategic, reputation, and financial risks to operational and regulatory risks — to gain competitive advantage. We apply our experience in ongoing business operations and corporate lifecycle events to help clients become stronger and more resilient. Our market-leading teams help clients embrace complexity to accelerate performance, disrupt through innovation, and lead in their industries. We support clients by delivering Operate services spanning the Regulatory, Risk & Forensic portfolio. We embed continuous advantage through domain, industry, technology / Gen AI, and transformation skills to perform client business functions that manage risk and deliver value-added outcomes. As an Analyst within the Testing & Validation Utility, you will support delivery of regulatory, compliance, and controls testing and validation outcomes, along with regulatory reporting, across the end-to-end risk management lifecycle — helping execute control and compliance testing, test regulatory reports, support risk and control self-assessments, validate issue remediation activities, and prepare regulatory filings. You will build foundational skills across multiple risk and assurance domains while consistently delivering high-quality, audit-ready work. Your work will be performed for first-line control owners, second-line risk and compliance functions, and internal audit, following a standard methodology and supported by analytics and GenAI tools. Typical activities include data sourcing and reconciliation, walkthroughs, population validation, sample selection, evidence review, root cause analysis, workpaper documentation, and reporting of results and remediation status. Specific responsibilities span the following areas: Controls Testing Perform end-to-end assessments of the design and operating effectiveness of operational and compliance controls — including walkthroughs, process documentation, test strategy, sample design, and population validation — with full traceability from risk through evidence to conclusion.
· Support end-to-end control assessments under supervision, including planning, walkthroughs, design effectiveness assessment, operating effectiveness testing, documentation, and issue follow-up
· Execute sample selection, evidence review, attribute testing, and conclusion drafting in accordance with established methodology and quality standards
· Prepare reviewer-ready workpapers, evidence files, and draft observations with clear rationale; document process flows for assigned reviews
· Maintain testing trackers, issue logs, and status updates; collaborate with control owners and senior team members to obtain evidence
· Build foundational understanding of internal control concepts (manual vs. automated, preventive vs. detective, IPE, SoD, sampling) Conformance Testing Execute conformance reviews of reports, processes, and controls against published regulatory instructions, internal policies, and procedures; identify variances, perform root cause analysis, and drive remediation.
· Support execution of conformance tests against regulatory reporting instructions (FFIEC, FRB, PRA, FCA, FINRA, SEC) and bank policy/procedure documents for assigned reports and processes
· Trace report values, attribute mappings, and disclosures to underlying instructions, taxonomies, and source documentation; flag deviations from prescribed treatment
· Document conformance test steps, evidence, and exceptions; maintain checklists, Operating Procedures, and Reports under the supervision of senior team members




· Assist with MI creation, status reporting, and tracking of conformance issues and remediation Compliance Testing Test the design and operating effectiveness of compliance controls across federal and state consumer protection regulations, BSA/AML, OFAC, sanctions, KYC, and fraud, delivering independent assurance outcomes for the business.
· Support execution of compliance testing covering federal and state consumer protection regulations (e.g., UDAAP, RESPA, TILA / Reg Z, Reg B, FCRA, FDPA, SCRA, SECURE Act, FDCPA, Dodd-Frank), as well as BSA/AML, OFAC, sanctions, KYC, and fraud-related testing
· Execute targeted transaction testing per established test scripts; analyze transactional, qualitative, surveillance, onsite, and employee quality review samples
· Document defects and observations during testing; collaborate with Compliance and Operational Risk officers and Front Line Unit (FLU) process owners to validate preliminary results
· Maintain testing timelines, workpapers, and trackers; support QA reviews and rework remediation Regulatory Reporting QA & Testing Perform in-line Quality Assurance and independent testing of regulatory reports to validate data lineage, conformance with reporting instructions, accuracy, completeness, and the effectiveness of report-level controls.
· Support execution of in-line Quality Assurance (QA) testing across US and global regulatory reports (e.g., FR Y-9C, FR Y-15, FR 2052a, LCR, CCAR, PRA 110), including data profiling, completeness checks, and conformance reviews under supervision
· Perform sample selection, evidence gathering, and trace transactions from source systems to final report line items to validate accuracy, completeness, and conformance with reporting instructions
· Document test steps, source-to-report mapping, exceptions, and conclusions in approved workpaper templates with reviewer-ready quality
· Assist in maintaining the QA test calendar, scoping documents, and intake artifacts; track testing status and update trackers for stakeholders
· Escalate exceptions, data quality issues, and interpretive questions to the team lead in a timely manner Risk & Control Self-Assessment (RCSA) and Post-Effectiveness Testing Facilitate and execute risk and control self-assessments — identifying inherent risks, evaluating control effectiveness, rating residual risk, and tracking action plans — and perform post-effectiveness testing of key controls, in line with the Operational Risk Management Framework.
· Support RCSA execution under supervision: assist with risk identification workshops, evidence gathering, and documentation of inherent risks, controls, residual risks, and action plans
· Maintain the RCSA library/inventory in the GRC platform (e.g., Archer, ServiceNow IRM, OpenPages); update risk and control records based on agreed changes
· Support post-effectiveness testing of controls identified in the RCSA; document test steps, evidence, and conclusions
· Prepare MI and dashboards summarizing RCSA results and remediation status for stakeholders Issue Management & Remediation Validation Validate the completeness and accuracy of issue remediation activities, perform root cause analysis, and assure the sustainability of corrective actions for self-identified, audit, and regulatory issues.
· Support issue validation activities under supervision: review remediation artifacts for completeness and accuracy against documented remediation scope
· Analyze documents and supporting artifacts to validate completion of remediation activities for self-identified issues, audit findings, and regulatory issues
· Assist in compiling issue closure packages; document rationale, evidence reference, and validation conclusion in approved templates
· Maintain issue trackers, status logs, and MI; coordinate evidence requests with issue owners and Issue Execution Officers Regulatory Reporting Alongside testing and validation work, support the preparation, review, and timely submission of financial and non-financial regulatory filings across Banking, Capital Markets, and Investment Management clients — including FFIEC Call Reports, FR Y-series filings, CCAR/DFAST, liquidity and capital reports (LCR, NSFR, FR 2052a), broker-dealer filings (FOCUS, FINRA), and Investment Management reports (Form PF, N-PORT, Form ADV) — with appropriate accuracy, completeness, and audit-ready documentation.
· Support preparation of financial and non-financial regulatory filings across Banking (FFIEC Call Reports 031/041/051, FR Y-9C/9LP, FR Y-14, FR Y-15, FR 2052a), Capital Markets (FOCUS Report, FINRA filings, large trader reporting), and Investment Management (Form PF, N-PORT, N-CEN, Form ADV, CPO-PQR, 1940 Act and Private Funds, liquidity and derivatives reporting) clients, under the guidance of senior team members
· Compile, validate, and reconcile data from source systems for filings to the FRB, OCC, FDIC, SEC, CFTC, FINRA, and other regulators; flag data quality issues, lineage gaps, and timing risks early
· Maintain process documentation, SOPs, checklists, and audit trails for assigned filings; ensure version control and audit-ready evidence
· Coordinate with technology teams on data sourcing, triage, and ad-hoc data requests across recurring and one-off reporting cycles
· Escalate interpretive questions and data anomalies to reviewers in a timely manner; participate in knowledge sharing on regulatory instructions and taxonomy changes Root Cause & Thematic Analysis, Testing MI, and KCI/KRI Reporting (across all components) Analyze why exceptions occur, surface themes across testing results, and report results and remediation status to control owners, second-line risk and compliance functions, and internal audit.
· Support root cause analysis on test exceptions and control failures by gathering evidence, documenting contributing factors, and escalating observations to reviewers
· Prepare testing MI and dashboards (status, exceptions, remediation) in Excel or Power BI; maintain trackers and keep stakeholders updated on progress
· Support compilation of KCI/KRI data and track remediation status for reporting to control owners, risk and compliance functions,



and internal audit Analytics-led & GenAI-enabled Testing (across all components)
· Use approved AI / Generative AI (GenAI) tools (Microsoft 365 Copilot, Claude, ChatGPT / Azure OpenAI, Deloitte-approved AI assistants) to accelerate evidence review, document summarization, and routine drafting tasks, in line with firm AI usage policies
· Build basic prompt-writing skills for testing tasks such as drafting walkthrough narratives, summarizing policies, and exception write-ups
· Use Excel (pivots, lookups, conditional formatting) and basic SQL / Power Query / Alteryx Designer to prepare data, run reconciliations, and support sample selection and population analysis for testing Required

skills:
· 2-4 years of relevant experience in any of: regulatory reporting QA, conformance testing, controls testing, compliance testing, RCSA, issue management, internal audit, operational risk, or risk management in a BFSI, other regulated-industry, or consulting environment
· Exposure to the end-to-end risk management lifecycle — Transactions, Conformance, Controls, Compliance, RCSA, and Issue Management — with willingness to build depth across multiple components within the Testing & Validation Utility
· Working knowledge of internal control concepts (manual vs. automated, preventive vs. detective, IPE, SoD, sampling fundamentals)
· Awareness of the COSO 2013 framework and the broader regulatory and compliance landscape applicable to the industries we serve, particularly Banking, Financial Services & Insurance (BFSI)
· Advanced Microsoft Excel (pivots, lookups, conditional logic) and working knowledge of Word, PowerPoint, and Outlook
· Working knowledge of, and willingness to use, AI / GenAI tools (Microsoft 365 Copilot, Claude, ChatGPT / Azure OpenAI, or equivalents) for productivity, summarization, and analysis tasks; awareness of responsible AI usage, data privacy, and confidentiality requirements
· Basic SQL, Power Query, or willingness to learn at least one analytical / data-prep tool (Alteryx Designer, KNIME, or equivalent) for sample selection, reconciliations, and exception analysis
· Strong analytical skills with high attention to detail and accuracy
· Solid written and verbal communication skills, with ability to document observations and interact with stakeholders
· Ability to work in a fast-paced environment, manage multiple priorities, and meet deadlines with high-quality standards Preferred

skills:
· Exposure to BFSI products and processes (banking operations, payments, lending, capital markets, insurance, or investment compliance)
· Awareness of SOX Section 404 and ITGC fundamentals
· Exposure to regulatory reporting across Banking (FFIEC Call Reports, FR Y-9C, FR Y-15, FR 2052a, LCR, CCAR, PRA 110, FINREP/COREP), Capital Markets (FOCUS, FINRA filings), or Investment Management (Form PF, N-PORT, Form ADV), and/or consumer compliance regulations (UDAAP, RESPA, TILA, Reg B/Z, FCRA, BSA/AML)
· Exposure to GRC platforms (Archer, ServiceNow GRC / IRM, MetricStream, OpenPages, Workiva)
· Awareness of Continuous Controls Monitoring (CCM) and analytics-driven assurance
· Awareness of Deloitte AI policies and Trustworthy AI; certifications such as Microsoft AI-900 are a plus
· Pursuing or partially completed certifications such as CIA, CISA, CRMA, CFE, FRM, CAMS, or CPA Qualification:
· Bachelor's degree in Commerce, Finance, Business, Accounting, Engineering, or Computer Science, or similar 3-year graduate course
· M.
Com / MBA or similar post-graduate course (Tier 2/3 colleges) is a plus

Location:
· Hyderabad / Bengaluru / Chennai
· Professionals are required to work from the office all 5 days of the week.
· Based on engagement requirements, professionals will be required to work out of a secure clean room and/or an Offshore Delivery Center (ODC). Shift Timings:
· Based on the engagement, professionals will work in one of the following shifts: 9:00 AM – 6:00 PM, 11:00 AM – 8:00 PM, or 2:00 PM – 11:00 PM.
· As part of your role at Deloitte and its related entities, you may be required to work in various shift timings to support client deliverables. This could also involve working beyond standard hours, including weekends, holidays and also from Offshore Delivery Centers (ODC) or Client Location. You may be assigned to projects on different technical platforms and skills, and work at designated locations as determined by the company. Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work. Professional development At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India. Benefits to help you thrive At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones,

we offer
a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you. Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Requisition code: 374117

📌 Regulatory, Compliance (Hyderabad)
🏢 Deloitte
📍 Hyderabad