About the role
- Support enterprise risk and controls assurance programs across Compliance, ITGC, Information Security, and SOX domains.
- Perform control testing or independent validation within a structured Three Lines of Defense framework.
- Evaluate control design, operating effectiveness, and remediation activities through evidence-based assessments.
- Partner with risk, compliance, technology, and audit stakeholders to strengthen governance and control environments.
- Contribute to audit-ready, regulator-ready, and defensible risk management outcomes within financial services environments.
Job Description
- Execute Test of Design (TOD) and Test of Effectiveness (TOE) activities or perform independent validation of completed testing.
- Assess control alignment to internal standards, regulatory requirements, and risk management frameworks.
- Evaluate sampling methodologies, evidence quality, control coverage, and testing conclusions.
- Identify control gaps, challenge findings where appropriate, and support remediation tracking.
- Prepare audit-defensible documentation including findings, root cause analysis, evidence assessments, and remediation recommendations.
- Manage issue lifecycle activities from identification through closure validation.
- Support risk reporting, dashboard preparation, stakeholder communication, and governance reviews.
- Maintain high-quality documentation within GRC platforms and ensure adherence to independence standards.
- Contribute to quality assurance reviews, thematic risk assessments, and continuous improvement initiatives.
Qualifications
- Bachelor’s degree in Finance, Business Administration, Information Systems, Information Technology, Accounting, or a related discipline.
- Professional certifications such as CISA, CRISC, CISSP, CIA, CPA, CISM, or equivalent are preferred.
- Additional certifications in Risk Management, Information Security, Compliance, or Internal Audit are advantageous.
- 2–12 years of experience in controls testing, IT audit, operational risk, risk oversight, controls assurance, or independent validation functions.
- Experience working within First Line of Defense (1LOD), Second Line of Defense (2LOD), Internal Audit, Compliance, or Risk Management environments.
- Exposure to banking, financial services, or regulated industry control frameworks is preferred.
- Experience performing TOD and TOE assessments across operational, compliance, technology, or information security controls.
- Hands-on experience supporting audits, regulatory reviews, issue management, and remediation validation activities.
- Experience utilizing GRC platforms and maintaining audit-ready documentation.
- Strong understanding of Compliance Controls, SOX controls, IT General Controls (ITGC), and Information Security control frameworks.
- Knowledge of regulatory compliance requirements, financial crime controls, consumer protection controls, and regulatory reporting obligations.
- Expertise in ITGC domains including Access Management, Change Management, Operations, and Software Development Lifecycle (SDLC).
- Understanding of Information Security domains including Vulnerability Management, Incident Response, Cloud Security, and Cybersecurity Controls.
- Strong knowledge of risk management frameworks such as COSO, Three Lines of Defense, NIST, and related control standards.
- Hands-on experience with GRC platforms including Archer, MetricStream, or ServiceNow GRC.
- Strong SOX, ITGRC, controls testing, and validation fundamentals.
- Advanced Excel skills for sampling, testing analysis, and risk reporting.
- Ability to create high-quality, audit-defensible, regulator-ready documentation and working papers.
- Strong analytical thinking, professional skepticism, and evidence-based decision-making capabilities.
- Experience managing issue lifecycle activities, remediation validation, and risk escalation processes.
- Excellent stakeholder management, presentation, and communication skills.
- Ability to identify thematic and systemic control risks beyond individual control deficiencies.
- Strong commitment to independence, governance standards, and quality assurance practices.
Perks & Benefits
Medical Insurance
You can choose a medical plan from Health Savings Plan, HRA and PPO that is relevant to your health care needs and budget
Parental leave
You can choose a medical plan from Health Savings Plan, HRA and PPO that is relevant to your health care needs and budget
Training and development
You can choose a medical plan from Health Savings Plan, HRA and PPO that is relevant to your health care needs and budget
Two-way transport
You can choose a medical plan from Health Savings Plan, HRA and PPO that is relevant to your health care needs and budget
