Control Tester
A Control Tester is responsible for assessing whether key business, financial, compliance, IT, and operational controls are designed effectively and operating as intended. The role ensures the bank meets internal policies, regulatory expectations and reduces operational risks.
Key Responsibilities
- Perform design effectiveness (DE) and operating effectiveness (OE) testing of internal controls, develop detailed test scripts, sampling plans, and walkthroughs.
- Conduct evidence‑based testing for operational and IT general controls (ITGC) and regulatory compliance controls.
- Collect and review evidence such as logs, screenshots, system reports, approvals, workflows, and audit trails; document test results in GRC tools (ServiceNow IRM, Archer, MetricStream, etc.) and maintain high‑quality workpapers aligned to internal audit standards.
- Identify control gaps, process breakdowns, and residual risks; rate issues based on severity and regulatory impact; prepare clear, concise reports for stakeholders such as Risk Owners, Process Owners, and Audit Teams.
- Liaise with 1st line of defense (business + operations) and 2nd line (Risk & Compliance) to refine control frameworks; partner with Internal Audit for alignment on scope and testing methodology.
- Participate in control self‑assessment (CSA/RCSA) cycles; support root‑cause analysis and remediation validation; assist in enhancing control libraries, risk registers, and process maps.
- Ensure testing aligns with regulatory requirements and policy framework.
Technical Skills
- Understanding of risk and control frameworks (COSO, COBIT).
- Knowledge of banking / insurance processes.
- Proficiency in GRC tools: ServiceNow IRM, Archer, MetricStream, Workiva.
Behavioral Skills
- Strong analytical and critical‑thinking abilities.
- Excellent documentation and communication skills.
- Attention to detail and adherence to testing standards.
Qualifications
- Bachelor’s degree in Finance, Accounting, Business, Commerce, or IT.
- Preferred certifications in risk and control, internal audit, or related fields.