IT Control Testing

Job Description :

• Hands-on experience performing IT Controls Testing, including IT General Controls (ITGC) and IT Application Controls (ITAC).
• Conducted control design and operating effectiveness assessments through technical audits and evidence-based evaluations.
• Extensive experience in Cybersecurity and Technology Risk Audits using a risk-based audit approach rather than compliance-only assessments.
• Strong technical expertise across Cloud environments, IT infrastructure, enterprise applications, and emerging technologies.
• Experience assessing AI governance, AI controls, and technology risks associated with AI-enabled solutions.
• Performed control assessments against industry-standard frameworks including NIST, CRI, ISO 27001/27K, PCI-DSS, FFIEC, HIPAA, and similar regulatory standards.
• Demonstrated ability to review technical evidence, system configurations, logs, and security artifacts to validate control implementation and effectiveness.
• Skilled in identifying control gaps, evaluating risks, and providing practical recommendations to strengthen the organization's control environment.
• Proficient in preparing audit workpapers, documenting observations, reporting findings, and presenting actionable remediation recommendations to stakeholders.
• Strong communication and stakeholder management skills with proven experience leading hands-on control testing and technical audits, beyond audit readiness, compliance support, or documentation activities.