Technology Risk Management Control Testing

NLB Services; Dadri, Greater Noida, Gurugram District; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

NLB Services in India is seeking an execution-oriented Control Tester with extensive experience in Technology Risk and IT Audit. You will independently manage the testing lifecycle, perform control walkthroughs, and coordinate with business and technology stakeholders to verify control design and operating effectiveness.

Responsibilities include ToD/ToE testing, evidence validation, and documenting results, gaps, and remediation actions.

Qualifications

• 25 years of relevant experience in Technology Risk / IT Audit / IT Controls Testing.
• Hands-on experience with ToD & ToE testing.
• Strong understanding of control testing methodology and sampling.
• Ability to interpret control narratives and execute testing procedures.
• Experience in evidence validation and sufficiency assessment.
• Strong workpaper preparation and documentation skills.
• Ability to identify and communicate control exceptions and gaps.
• Good understanding of risk and control concepts.
• Strong written and verbal communication skills.
• Comfortable working with both business and technology stakeholders.

Responsibilities

• Conduct control walkthroughs with business and technology stakeholders.
• Understand risk, control objectives, control narratives, and testing requirements.
• Execute ToD and ToE testing based on defined methodologies and sampling requirements.
• Review control-owner evidence for relevance, sufficiency, completeness, and traceability.
• Prepare and maintain audit-ready testing workpapers.
• Document testing procedures, evidence reviewed, results, and conclusions.
• Identify and document control gaps, exceptions, and observations.
• Discuss observations with stakeholders and track remediation.
• Maintain testing trackers, work queues, status reports, backlog, and aging items.
• Incorporate QA/reviewer feedback and maintain consistency in testing conclusions.
• Support management reporting and audit-readiness activities.

Skills

IT Audit

IT Controls Testing

Risk Management

Evidence Validation

Documentation Skills

Stakeholder Communication

Job description

KEY RESPONSIBILITIES

• Conduct control walkthroughs with business and technology stakeholders.
• Understand risk, control objectives, control narratives, and testing requirements.
• Execute ToD and ToE testing based on defined methodologies and sampling requirements.
• Review control-owner evidence for relevance, sufficiency, completeness, and traceability.
• Prepare and maintain audit-ready testing workpapers.
• Document testing procedures, evidence reviewed, results, and conclusions.
• Identify and document control gaps, exceptions, and observations.
• Discuss observations with stakeholders and track remediation.
• Maintain testing trackers, work queues, status reports, backlog, and aging items.
• Incorporate QA/reviewer feedback and maintain consistency in testing conclusions.
• Support management reporting and audit-readiness activities.

RELEVANT TECHNOLOGY RISK AREAS

• IT General Controls (ITGC)
• Infrastructure & Platform Controls
• Database Controls
• Application Controls
• Technology Operations
• Technology Risk Management
• Cybersecurity / Information Security Controls
• Identity & Access Management
• Network / Endpoint Security
• Application Security
• Cloud / Data Security
• Security Operations

REQUIRED SKILLS

• 25 years of relevant experience in Technology Risk / IT Audit / IT Controls Testing / Technology Controls Assurance.
• Hands-on experience with ToD & ToE testing.
• Strong understanding of control testing methodology and sampling.
• Ability to interpret control narratives and execute appropriate testing procedures.
• Experience in evidence validation and sufficiency assessment.
• Strong workpaper preparation and documentation skills.
• Ability to identify and communicate control exceptions and gaps.
• Good understanding of risk and control concepts.
• Strong written and verbal communication skills.
• Comfortable working with both business and technology stakeholders.

GOOD TO HAVE

COBIT | NIST | ISO 27001 | Banking / BFSI | Cyber Risk | Cloud Security | IAM | Technology Controls

IDEAL CANDIDATE

We are specifically looking for an execution-oriented Control Tester, not candidates whose experience is limited to IT operations/support.

The candidate should be able to independently manage the testing lifecycle:

Control Walkthrough Understand Risk & Control ToD / ToE Testing Evidence Validation Document Results Identify Exceptions Complete Workpaper Incorporate Review Feedback

Immediate / Short Notice candidates preferred.