IT Control Testing

Capco; India; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Capco in India seeks an experienced Senior IT Controls Tester/Manager to lead independent controls testing across major change programmes and technology environments.

This role requires strong knowledge of IT general controls, risk assessment, and the ability to challenge stakeholders with clear, evidence-based conclusions. You will drive testing quality and governance across multiple programs.

Qualifications

• Significant experience in IT controls testing, technology risk, or related control assurance discipline.
• Strong knowledge of IT general controls and control frameworks (IAM, change control, cyber security, SDLC, data controls).
• Proven ability to lead assessments of design and operating effectiveness with evidence-based conclusions.
• Experience challenging stakeholders and delivering balanced risk-based judgments.
• Experience in governance, risk management, and assurance in large/regulatory environments.

Responsibilities

• Lead planning and execution of independent IT controls testing across key change programmes.
• Define test scope, approach, and methodology to assess design adequacy and operating effectiveness of IT controls.
• Provide independent assurance over control environments, including access management, change control, cyber security, resilience, and data controls.
• Validate closure readiness by verifying remediation actions and risk treatment commitments.
• Review management evidence and testing artefacts to ensure robust, traceable conclusions.
• Identify control weaknesses and risks, providing clear closure recommendations.
• Prepare and present testing outputs and management summaries for governance forums and senior stakeholders.
• Escalate significant issues and residual risks in a timely manner.
• Strengthen testing documentation, templates, and evidence management.
• Mentor junior testers and contribute to testing framework enhancements.

Skills

IT controls testing

IT audit

Risk management

Stakeholder management

Change management

Cyber security

Education

Bachelor's degree in IT / Cybersecurity / Risk / Audit

CISA / CRISC / CISSP / CIA / ITIL / ISO 27001

Job description

Job Title: IT Control testing

About Us

“Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients acrossbanking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery.

WHY JOIN CAPCO?

You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.

MAKE AN IMPACT

Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.

#BEYOURSELFATWORK

Capco has a tolerant, open culture that values diversity, inclusivity, and creativity.

CAREER ADVANCEMENT

With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.

DIVERSITY & INCLUSION

We believe that diversity of people and perspective gives us a competitive advantage.

MAKE AN IMPACT

Requirements:

Job Title: IT control Testing

Experience

The Senior IT Controls Tester / Manager will play a key role in planning, leading, and overseeing independent controls testing activity across a broad technology and operational risk landscape. The role requires strong subject matter expertise in IT controls, sound risk judgement, and the ability to lead testing activity with credibility, consistency, and independence. The successful candidate will work closely with programme teams, control owners, technology stakeholders, and risk and assurance partners to ensure that closure decisions are supported by robust control validation and clear reporting.

Principal Responsibilities

• Lead the planning and execution ofindependent IT controls testingacross key change programme.
• Define and oversee test scope, approach, and methodology to assess thedesign adequacyandoperating effectivenessof key IT controls.
• Provide independent assurance over control environments across areas including access management, change management, cyber/security, resilience, infrastructure, SDLC, data, and operational controls.
• Assess programme closure readiness by validating that control requirements, remediation actions, and risk treatment commitments have been completed, evidenced, and are sustainable.
• Review and challenge management evidence, testing artefacts, and closure submissions to ensure conclusions are robust, objective, and traceable.
• Identify and evaluate control weaknesses, thematic risks, and residual exposures, and provide clear recommendations or closure positions.
• Prepare and present high-quality testing outputs, assurance papers, and management summaries for governance forums, senior stakeholders, and oversight committees.
• Escalate significant issues, testing exceptions, and material residual risks in a timely and appropriate manner.
• Drive consistency, quality, and audit readiness across testing documentation, workpapers, reporting, and evidence management.
• Provide guidance, oversight, and quality review for more junior testers or contributors, as applicable.
• Contribute to the ongoing enhancement of testing frameworks, assurance methodologies, templates, standards, and quality controls.
• Build strong working relationships across technology, risk, controls, audit, and programme delivery teams while preserving the independence of the testing function.

Requirements

To be successful in this role you should meet the following requirements:

• Significant experience inIT controls testing, technology risk, IT audit, internal controls assurance, or a related control assurance discipline.
• Strong knowledge ofIT general controlsand broader technology risk and control frameworks, including identity and access management, change control, cyber security, incident/problem management, resilience, infrastructure, SDLC, and data-related controls.
• Proven ability to lead control assessments covering bothdesign effectivenessandoperating effectiveness, including evaluation of remediation actions and closure evidence.
• Experience in independently challenging stakeholders and forming balanced, risk-based conclusions supported by clear evidence.
• Strong understanding of governance, risk management, and assurance expectations within large and preferably regulated organizations.
• Ability to manage multiple testing activities, priorities effectively, and deliver to tight timelines without compromising quality.
• Strong written and verbal communication skills, including the ability to present complex control issues to senior stakeholders in a concise and credible manner.
• Experience leading reviews, coaching team members, or providing quality assurance over testing outputs would be advantageous.
• Experience supporting major programmes, enterprise transformation, or closure governance activity is highly desirable.

Qualifications

• Bachelor’s degree or equivalent experience in Information Technology, Cybersecurity, Risk, Audit, or a related discipline.
• Professional certifications such asCISA, CRISC, CISSP, CIA, ITIL, or ISO 27001are advantageous.

The role holder will demonstrate

• Strongindependence, integrity, and professional judgement
• A well-developed risk and control mindset
• Credibility in stakeholder engagement and constructive challenge
• High attention to detail and strong quality discipline
• Leadership capability and confidence in complex delivery environments
• A pragmatic, evidence-based approach to assurance and decision support

Why join us

This role offers the opportunity to influence critical programme and closure decisions by providing robust, independent assurance across the technology control environment. You will operate at the intersection of risk, technology, and change, helping to strengthen governance, improve control outcomes, and support confident decision‑making across strategic initiatives.