Manager -ITGC

Enterprise Risk Management (First Line of Defense) ITGC Testing

Please share your cv at [email removed]

Role Overview

Job Title: Manager Technology Risk Management Control Testing
Function: Risk & Compliance / Technology Risk Management
Location: Gurugram
Work Model: Strictly Work from Office
Shift 5:30pm -2:30am IST
Experience 6 -12 years

Please share your cv at [email removed]

Immediate Joiners ar preferable

Role Overview

We are lookiing for Manager to support Technology Risk Management (TRM) Control Testing activities across Technology and Cyber Risk domains.

The role will involve execution of control testing activities across the control lifecycle, including control walkthroughs, Design Effectiveness (ToD) and Operating Effectiveness (ToE) testing, evidence validation, workpaper preparation, documentation of observations and testing status/reporting.

The candidate should have hands-on experience in technology risk, IT audit or technology controls testing and be comfortable working with control narratives, testing procedures, evidence and audit-ready documentation.

Key Responsibilities

• Conduct and support control walkthroughs with relevant stakeholders to understand control design and execution.
• Perform Design Effectiveness (ToD) testing in accordance with the defined methodology and sampling requirements.
• Perform Operating Effectiveness (ToE) testing based on approved testing procedures and samples.
• Review and validate evidence submitted by control owners.
• Assess evidence for relevance, sufficiency, completeness and traceability to the applicable control.
• Evaluate alignment between the risk, control requirements, control activities and supporting evidence.
• Prepare and maintain audit-ready testing workpapers.
• Document testing procedures, evidence reviewed, test results and conclusions.
• Prepare or update process and control narratives, where required.
• Identify and document control gaps, exceptions and observations.
• Discuss testing observations with relevant stakeholders and support resolution tracking.
• Maintain testing trackers, work queues and status reports.
• Track testing milestones, pending controls, review backlog and aging items.
• Support management reporting and audit-readiness activities.
• Incorporate review/QA feedback into testing documentation and subsequent testing.
• Ensure consistency and quality of testing conclusions and workpapers.

Technology Risk Areas

Candidates should have experience in one or more of the following:

• IT General Controls (ITGC)
• Infrastructure & Platforms
• Database Controls
• Application Controls
• Technology Operations
• Technology Risk Management
• Cybersecurity / Information Security Controls
• Identity & Access Management
• Network / Endpoint Security
• Application Security
• Cloud / Data Security
• Security Operations

Required Skills

• 6-12 years of relevant experience in Technology Risk, IT Audit, IT Controls Testing or Technology Controls Assurance.
• Hands-on experience performing ToD and ToE testing.
• Strong understanding of control testing methodology and sampling.
• Ability to interpret control narratives and develop/execute appropriate testing procedures.
• Experience reviewing and validating control evidence.
• Strong understanding of evidence sufficiency and traceability.
• Experience preparing audit-ready workpapers.
• Ability to identify, document and communicate control exceptions.
• Good understanding of risk and control concepts.
• Strong written and verbal communication skills.
• Ability to work with business and technology stakeholders.
• Ability to work within defined methodologies, quality standards and TAT requirements.

Qualifications & Skills

• Bachelors degree in Computer Science, Information Systems, or related discipline.
• 5-11 years of experience in IT Risk, IT Audit, or ITGC Testing.
• Strong understanding of IT Governance, Security, and Risk Management concepts.
• Hands-on exposure to network configuration, vulnerability management, and patch management processes.
• Familiarity with frameworks like NIST, COBIT, ISO 27001, SOX, and SOC1/2 preferred.
• Strong analytical skills and ability to assess risks in IT infrastructure.
• Effective communication and stakeholder management skills with both technical and non-technical teams.