Analyst -ITGC

Job Title: Associate / Sr. Associate Technology Risk Management Control Testing

Function: Risk & Compliance / Technology Risk Management

Location: Gurugram

Work Model: Work from Office Shift: 5:30 PM 2:30 AM IST

Please share your profile directly at surbhi.malhotra@nlbtech.com

Notice Period-0-15 days

Role Overview

We are looking for Associates / Sr. Associates to support Technology Risk Management (TRM) Control Testing activities across Technology and Cyber Risk domains.

The role will involve execution of control testing activities across the control lifecycle, including control walkthroughs, Design Effectiveness (ToD) and Operating Effectiveness (ToE) testing, evidence validation, work paper preparation, documentation of observations and testing status/reporting.

The candidate should have hands-on experience in technology risk, IT audit or technology controls testing and be comfortable working with control narratives, testing procedures, evidence and audit-ready documentation.

Key Responsibilities

• Conduct and support control walkthroughs with relevant stakeholders to understand control design and execution.
• Perform Design Effectiveness (ToD) testing in accordance with the defined methodology and sampling requirements.
• Perform Operating Effectiveness (ToE) testing based on approved testing procedures and samples.
• Review and validate evidence submitted by control owners.
• Assess evidence for relevance, sufficiency, completeness and traceability to the applicable control.
• Evaluate alignment between the risk, control requirements, control activities and supporting evidence.
• Prepare and maintain audit-ready testing workpapers.
• Document testing procedures, evidence reviewed, test results and conclusions.
• Prepare or update process and control narratives, where required.
• Identify and document control gaps, exceptions and observations.
• Discuss testing observations with relevant stakeholders and support resolution tracking.
• Maintain testing trackers, work queues and status reports.
• Track testing milestones, pending controls, review backlog and aging items.
• Support management reporting and audit-readiness activities.
• Incorporate review/QA feedback into testing documentation and subsequent testing.

• Ensure consistency and quality of testing conclusions and workpapers.

Technology Risk Areas

Candidates should have experience in one or more of the following:

• IT General Controls (ITGC)
• Infrastructure & Platforms
• Database Controls
• Application Controls
• Technology Operations
• Technology Risk Management
• Cybersecurity / Information Security Controls
• Identity & Access Management
• Network / Endpoint Security
• Application Security
• Cloud / Data Security
• Security Operations

Required Skills

• 4-9 years of relevant experience in Technology Risk, IT Audit, IT Controls Testing or Technology Controls Assurance.
• Hands-on experience performing ToD and ToE testing.
• Strong understanding of control testing methodology and sampling.
• Ability to interpret control narratives and develop/execute appropriate testing procedures.
• Experience reviewing and validating control evidence.
• Strong understanding of evidence sufficiency and traceability.
• Experience preparing audit-ready workpapers.
• Ability to identify, document and communicate control exceptions.
• Good understanding of risk and control concepts.
• Strong written and verbal communication skills.
• Ability to work with business and technology stakeholders.
• Ability to work within defined methodologies, quality standards and TAT requirements.

Preferred Qualifications

• Exposure to COBIT, NIST, ISO 27001 or similar technology/control frameworks.
• Experience in the banking or financial services sector.
• Experience across multiple technology risk areas rather than ITGC alone.

Work Location & Shift

• Strictly Work From Office.
• Candidates must be comfortable working from the designated office location on all working days.
• Shift: 5:30 PM to 2:30 AM IST (please confirm the intended end time before this goes into the requisition).
• Monday to Friday working schedule.
• Flexibility to support changes in working hours based on business requirements.

Anaptyss is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to any legally protected characteristic, including disability and protected veteran status. For recruitment accommodations, contact your recruiter or notifications@anaptyss.com.