ITCG-Control Testing
- NLB Groups
- 7 - 12 years
- Hyderabad
- 9 days ago
- Email to a friend
- Report this job
Job Description
Key Responsibilities:
1. IT Control Testing and Evaluation:
- Plan and execute control testing of ITGCs and automated application controls.
- Evaluate design and operating effectiveness of controls related to:
- User access management (IAM)
- Change management
- System development lifecycle (SDLC)
- Backup & recovery
- IT operations and infrastructure security
- Document testing procedures, results, and exceptions in line with ERM standards.
2. Risk and Control Self-Assessments (RCSA):
- Support IT RCSA activities across technology platforms and infrastructure.
- Identify and assess IT risks, including cybersecurity threats and third-party/vendor risks.
- Collaborate with IT stakeholders to remediate identified control gaps and improve IT control posture.
3. Regulatory and Framework Compliance:
- Ensure alignment with regulatory requirements and industry frameworks such as:
- SOX (Sarbanes-Oxley)
- FFIEC, OCC, NIST, COBIT, ISO 27001
- Monitor compliance with internal IT policies, procedures, and enterprise risk tolerance.
4. Stakeholder Engagement & Collaboration:
- Work closely with IT, Information Security, Compliance, and Internal Audit teams.
- Serve as the subject matter expert (SME) on IT control testing and risk identification.
- Communicate findings, risks, and recommendations clearly to technical and non-technical stakeholders.
5. Reporting and Documentation:
- Develop testing scripts, risk-control matrices, and evidence documentation.
- Prepare executive-level reports highlighting key findings, trends, and remediation status.
- Track control testing progress and report deviations from expected timelines or outcomes.
6. Continuous Improvement:
- Stay current with technology risk trends, emerging threats, and evolving compliance standards.
- Recommend enhancements to IT control testing methodologies, tooling, and governance processes.
Key Qualifications:
- Education: Bachelors degree in Information Technology, Computer Science, Cybersecurity, Risk Management, or related fields. Advanced certifications are a plus.
- Certifications (preferred):
- CISA (Certified Information Systems Auditor)
- CRISC (Certified in Risk and Information Systems Control)
- CISSP, CGEIT, or ITIL certifications
- Experience:
- 810 years in IT risk management, internal audit, or control testing within financial services or technology-driven environments.
- Technical Skills:
- Strong knowledge of ITGCs, application controls, and system security principles
- Hands-on experience with GRC platforms (e.g., Archer, MetricStream, ServiceNow GRC)
- Familiarity with scripting or automation tools for testing/reporting is a plus
- Proficient in Excel, Power BI, or Tableau for data analysis and reporting
Please share your cv at su************a@nl****h.com
Job Classification
Industry: Analytics / KPO / ResearchFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Manager Information SecurityEmployement Type: Full timeContact Details:
Company: NLB GroupsLocation(s): Hyderabad
Keyskills: Cloud Security IT Risk Management Cyber Security Itgc Testing It General Controls It Controls Itgc Audit SOX
Similar positions
NLB Groups
. Hope you are doing well. As discussed, I have herewith attached the Job description and dossier of NLB Services and our group of companies. NLB is one of the fastest growing transformational workforce solutions provider. Over the last 16+ years, we have significantly grown our expertise from an...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in