Risk And Control testing

• Lead comprehensive control evaluations and substantive testing to independently assess the design and effectiveness of controls within the newly established Independent Testing Team
• Assess end to end business processes to identify significant gaps and determine issue root causes.
• Partners with business units to perform control evaluations, monitoring and testing efforts within Compliance and Operation Risk Framework to identify control gaps as well as opportunities for effectiveness and efficiency improvements. These assessments will include coverage for other regulatory programs including SOX
• Apply critical thinking skills to substantive testing techniques to thoroughly evaluate the effectiveness of high-risk business processes.
• Assess and monitor risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices.
• Collaborate with cross-functional teams and stakeholders to support control design and effectiveness.
• Foster collaboration with Compliance and Operational Risk Officers on various engagements. This includes developing detailed test scripts, facilitating issue discussions, participating in business meetings, and drafting comprehensive final reports to ensure alignment and clarity.
• Develop and execute robust control test scripts aimed at identifying control weaknesses, determining root causes, and recommending practical solutions to enhance operational efficiency and control effectiveness.
• Document test steps and results in a comprehensive and organized manner, ensuring sufficient support and justification for testing conclusions. Maintain a high standard of documentation to facilitate transparency and accountability.
• Ensure compliance with internal policies, procedures, and external laws, rules, and regulations, while identifying necessary remediation actions. This includes developing and executing testing procedures, meticulously documenting results, drawing informed conclusions, making actionable recommendations, and distributing detailed compliance testing review reports.
• Lead meetings with business owners at various management levels, delivering testing results and supporting sustainable control enhancements. Identify and capitalize on opportunities to strengthen controls and improve operational efficiency.

Your preferred skills and experience

• Bachelor's degree in information security or related field required, with a preference towards master's degree.
• Demonstrated ability to analyse complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders.
• Proficient knowledge of risk management frameworks, regulations, and industry best practices
• Strong and progressive Auditing or Control Testing experience with current knowledge and understanding of Control testing methodology.
• Experience developing test scripts, audit programs, or testing templates.
• 6+ years in information security management and governance, with a focus on control design and testing
• Detailed experience in ISO 27001, GDPR, COBIT, KAIT, BAIT, etc. and other cyber security frameworks
• Good to have Certifications: CRISC, CISSP, CISM, CISA, ISO 27001 Lead Implementer/ Auditor
• Should possess strong communication skills (written/ spoken)
• Should be skilled to work with minimal supervision.
• Strong analytical and strategic mindset along with the ability to collaborate with different stakeholders including top management representatives.