It Risk And Control Specialist

Were Hiring: Associate / Sr. Associate – Technology Risk Management (Control Testing)

Location: Gurugram
Experience: 2+ Years
Work Mode: Work From Office (WFO)
Shift: 5:30 PM – 2:30 AM IST
Working Days: Monday to Friday

Role Overview

We are looking for candidates with hands-on experience in Technology Risk, IT Audit, or Technology Controls Testing to support control testing across technology and cybersecurity domains.

Key Responsibilities

• Conduct control walkthroughs and perform Design Effectiveness (ToD) and Operating Effectiveness (ToE) testing.
• Review and validate control evidence for completeness, relevance, and accuracy.
• Prepare audit-ready workpapers, testing documentation, and control narratives.
• Identify and document control gaps, exceptions, and observations.
• Maintain testing trackers, monitor progress, and coordinate with stakeholders.
• Incorporate review feedback and ensure quality documentation.

Required Skills

• 2–5 years of experience in Technology Risk, IT Audit, IT Controls Testing, or Controls Assurance.
• Hands-on experience with ToD and ToE testing is essential.
• Understanding of control testing methodologies, sampling, risk assessment, and evidence validation.
• Experience in preparing workpapers and documenting control exceptions.
• Exposure to ITGC, IAM, Infrastructure, Application Controls, Cybersecurity, Cloud Security, or Technology Operations.
• Strong communication, analytical, and stakeholder management skills.

Preferred Qualifications

• Knowledge of COBIT, NIST, or ISO 27001 frameworks.
• Banking or financial services experience.
• Exposure to multiple technology risk and cybersecurity control areas.

Important: This is an execution-focused control testing role, not a general IT operations position. Candidates must be comfortable working from the Gurugram office during the specified shift.

Interested candidates can share their updated resumes at:
[email removed]