About the role
- Support enterprise risk and controls assurance programs across Compliance, ITGC, Information Security, and SOX domains.
- Perform control testing or independent validation within a structured Three Lines of Defense framework.
- Evaluate control design, operating effectiveness, and remediation activities through evidence-based assessments.
- Partner with risk, compliance, technology, and audit stakeholders to strengthen governance and control environments.
- Contribute to audit-ready, regulator-ready, and defensible risk management outcomes within financial services environments.
Job Description
- Execute Test of Design (TOD) and Test of Effectiveness (TOE) activities or perform independent validation of completed testing.
- Assess control alignment to internal standards, regulatory requirements, and risk management frameworks.
- Evaluate sampling methodologies, evidence quality, control coverage, and testing conclusions.
- Identify control gaps, challenge findings where appropriate, and support remediation tracking.
- Prepare audit-defensible documentation including findings, root cause analysis, evidence assessments, and remediation recommendations.
- Manage issue lifecycle activities from identification through closure validation.
- Support risk reporting, dashboard preparation, stakeholder communication, and governance reviews.
- Maintain high-quality documentation within GRC platforms and ensure adherence to independence standards.
- Contribute to quality assurance reviews, thematic risk assessments, and continuous improvement initiatives.
Qualifications
- Bachelor’s degree in Finance, Business Administration, Information Systems, Information Technology, Accounting, or a related discipline.
- Professional certifications such as CISA, CRISC, CISSP, CIA, CPA, CISM, or equivalent are preferred.
- Additional certifications in Risk Management, Information Security, Compliance, or Internal Audit are advantageous.
- 2–12 years of experience in controls testing, IT audit, operational risk, risk oversight, controls assurance, or independent validation functions.
- Experience working within First Line of Defense (1LOD), Second Line of Defense (2LOD), Internal Audit, Compliance, or Risk Management environments.
- Exposure to banking, financial services, or regulated industry control frameworks is preferred.
- Experience performing TOD and TOE assessments across operational, compliance, technology, or information security controls.
- Hands-on experience supporting audits, regulatory reviews, issue management, and remediation validation activities.
- Experience utilizing GRC platforms and maintaining audit-ready documentation.
- Strong understanding of Compliance Controls, SOX controls, IT General Controls (ITGC), and Information Security control frameworks.
- Knowledge of regulatory compliance requirements, financial crime controls, consumer protection controls, and regulatory reporting obligations.
- Expertise in ITGC domains including Access Management, Change Management, Operations, and Software Development Lifecycle (SDLC).
- Understanding of Information Security domains including Vulnerability Management, Incident Response, Cloud Security, and Cybersecurity Controls.
- Strong knowledge of risk management frameworks such as COSO, Three Lines of Defense, NIST, and related control standards.
- Hands-on experience with GRC platforms including Archer, MetricStream, or ServiceNow GRC.
- Strong SOX, ITGRC, controls testing, and validation fundamentals.
- Advanced Excel skills for sampling, testing analysis, and risk reporting.
- Ability to create high-quality, audit-defensible, regulator-ready documentation and working papers.
- Strong analytical thinking, professional skepticism, and evidence-based decision-making capabilities.
- Experience managing issue lifecycle activities, remediation validation, and risk escalation processes.
- Excellent stakeholder management, presentation, and communication skills.
- Ability to identify thematic and systemic control risks beyond individual control deficiencies.
- Strong commitment to independence, governance standards, and quality assurance practices.
Perks & Benefits
Medical Insurance
Choose from Health Savings Plan, HRA, or PPO, whichever best fits your healthcare needs and budget.
Parental leave
Take the time you need to welcome and care for your growing family, with leave designed to support you through this milestone.
Training and development
Access structured, project-specific training and continuous learning opportunities that help you grow in your role and career.
Two-way transport
Enjoy stress-free commuting with two-way cab pick-up and drop-off facilities for every shift.
