Risk Control

• Design and execute control testing strategies to assess the design adequacy and operating effectiveness of IT/IS controls, including SOX and key controls.
• Develop and implement test plans, scripts, and templates to support control assurance objectives.
• Conduct control walkthroughs with control owners, including sampling and evidence collection.
• Identify control gaps and deficiencies and recommend corrective actions.
• Perform root cause analysis of issues and collaborate with control/process owners to define holistic remediation plans.
• Track and validate remediation actions post-testing to ensure timely and effective resolution.
• Prepare comprehensive testing documentation, including workpapers and reports, to communicate findings and recommendations.
• Liaise with stakeholders to prioritize controls and document repeatable test scripts for design and operational effectiveness testing.
• Review and enhance existing control testing methodologies based on IT risk and control frameworks and industry best practices.
• Collaborate with onshore and offshore teams to gather necessary evidence and support testing activities.
• Maintain up-to-date knowledge of industry standards, regulatory requirements, and best practices in IT/IS control testing.
• Perform security reviews, identify architectural gaps, and contribute to the development of security risk management plans.
• Communicate findings and insights to relevant stakeholders, including risk owners, management, and audit teams.
• Demonstrate a strong understanding of risk and control frameworks and core risk management principles.

Qualifications

Bachelor’s degree (or equivalent experience) with minimum 3-5 years of experience in IT risk and control testing, Risk and compliance. Preferably with global banking clients.

- ISO 27001, CRISC or CISA Certified Mandatory, CISSP certification Desirable

- Information Systems/Network Security

-Understanding of NIST, ISO, COBIT or equivalent cyber security framework.

- Information Technology Assessment and Risk Management