IT Control Tester

Anaptyss; Gurugram District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Anaptyss Inc. is seeking Associates / Sr. Associates to support Technology Risk Management (TRM) Control Testing across Technology and Cyber Risk domains.

The role covers control walkthroughs, ToD and ToE testing, evidence validation, and audit-ready documentation. The candidate should have hands-on experience in technology risk, IT audit or technology controls testing, and be comfortable working with control narratives, testing procedures and evidence.

Qualifications

• 4–10 years of relevant experience in Technology Risk, IT Audit, IT Controls Testing or Technology Controls Assurance.

Responsibilities

• Conduct and support control walkthroughs with stakeholders to understand control design and execution.
• Perform Design Effectiveness (ToD) testing per defined methodology and sampling requirements.
• Perform Operating Effectiveness (ToE) testing based on approved testing procedures and samples.
• Review and validate evidence submitted by control owners.
• Assess evidence for relevance, sufficiency, completeness and traceability.
• Prepare and maintain audit‑ready testing workpapers.
• Document testing procedures, evidence reviewed, test results and conclusions.
• Prepare or update process and control narratives, where required.
• Identify and document control gaps, exceptions and observations.
• Discuss testing observations with stakeholders and support resolution tracking.
• Maintain testing trackers, work queues and status reports.
• Track testing milestones, pending controls, review backlog and aging items.
• Support management reporting and audit-readiness activities.

Skills

Technology Risk

IT Audit

IT Controls Testing

Control Narratives

ToD/ToE testing

Evidence Review

Documentation

Stakeholder Communication

Job description

We are looking for Associates / Sr. Associates to support Technology Risk Management (TRM) Control Testing activities across Technology and Cyber Risk domains.

The role will involve execution of control testing activities across the control lifecycle, including control walkthroughs, Design Effectiveness (ToD) and Operating Effectiveness (ToE) testing, evidence validation, workpaper preparation, documentation of observations and testing status/reporting.

The candidate should have hands‑on experience in technology risk, IT audit or technology controls testing and be comfortable working with control narratives, testing procedures, evidence and audit‑ready documentation.

Key Responsibilities

• Conduct and support control walkthroughs with relevant stakeholders to understand control design and execution.
• Perform Design Effectiveness (ToD) testing in accordance with the defined methodology and sampling requirements.
• Perform Operating Effectiveness (ToE) testing based on approved testing procedures and samples.
• Review and validate evidence submitted by control owners.
• Assess evidence for relevance, sufficiency, completeness and traceability to the applicable control.
• Evaluate alignment between the risk, control requirements, control activities and supporting evidence.
• Prepare and maintain audit‑ready testing workpapers.
• Document testing procedures, evidence reviewed, test results and conclusions.
• Prepare or update process and control narratives, where required.
• Identify and document control gaps, exceptions and observations.
• Discuss testing observations with relevant stakeholders and support resolution tracking.
• Maintain testing trackers, work queues and status reports.
• Track testing milestones, pending controls, review backlog and aging items.
• Support management reporting and audit‑readiness activities.
• Incorporate review/QA feedback into testing documentation and subsequent testing.
• Ensure consistency and quality of testing conclusions and workpapers.

Technology Risk Areas

Candidates should have experience in one or more of the following:

• IT General Controls (ITGC)
• Infrastructure & Platforms
• Database Controls
• Application Controls
• Technology Operations
• Technology Risk Management
• Cybersecurity / Information Security Controls
• Identity & Access Management
• Application Security
• Security Operations

Required Skills

• 4–10years of relevant experience in Technology Risk, IT Audit, IT Controls Testing or Technology Controls Assurance.
• Hands‑on experience performing ToD and ToE testing.
• Strong understanding of control testing methodology and sampling.
• Ability to interpret control narratives and develop/execute appropriate testing procedures.
• Experience reviewing and validating control evidence.
• Strong understanding of evidence sufficiency and traceability.
• Experience preparing audit‑ready workpapers.
• Ability to identify, document and communicate control exceptions.
• Good understanding of risk and control concepts.
• Strong written and verbal communication skills.
• Ability to work with business and technology stakeholders.
• Ability to work within defined methodologies, quality standards and TAT requirements.

Anaptyss Inc. is a digitally enabled managed services organization (A group company of NLB Services) that empowers financial institutions worldwide through the full lifecycle evolution of tasks and processes into integrated functions. As a brand recognized for accelerated service delivery, Anaptyss' disruptive value proposition spans domain‑centric solutions and product engineering powered by the proprietary DKO™ framework and a globally integrated ecosystem for top‑tier talent acquisition and digital technologies. The organization is trusted by an illustrious clientele across the spectrum of regional/super‑regional banks, mortgages and commercial lending institutions, wealth management firms, FinTech companies, crypto exchanges, insurance providers, and more.

Anaptyss is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to any legally protected characteristic, including disability and protected veteran status. For recruitment accommodations, contact your recruiter or [e-mail].