Technical Specialist - Controls Assurance

Job Type: Permanent

Title (Technical Specialist - Controls Assurance)

Department (Technology Controls Assurance)

Location (Gurgaon, India)

Reports To (Senior Manager - Technology Controls Assurance)

Level (Grade 4)

As a Technology Specilaist, you will collaborate closely with the Technology and Digital teams to support the organizations compliance with various standards and certifications, including ISAE 3402/SOC 2, ISO 42001. Your responsibilities will include coordinating audit programs with internal stakeholders and external auditors, managing the certification lifecycle to ensure timely renewals and ongoing compliance, and spearheading continuous improvement initiatives.

You will define and monitor key performance indicators (KPIs) and key risk indicators (KRIs), maintaining an effective control library aligned with organizational policies and regulatory requirements. Additionally, you will lead efforts to automate control testing and evidence collection, thereby increasing the efficiency and accuracy of compliance reporting. Collaborating with both technology and business teams, you will help implement effective controls and act as a key point of contact during audit processes.

With expertise in IT General Controls, you will identify opportunities for process simplification and automation, driving ongoing enhancements. You will also serve as a trusted advisor on AI governance, ensuring alignment with ISO 42001 standards and ethical AI principles.

This role involves complex challenges and requires strong data analysis skills, including proficiency in advanced Excel functions and data visualization tools, to define KPIs and KRIs, report on control effectiveness, and analyze non-compliance issues for corrective actions. The ideal candidate is a strategic thinker with the ability to resolve system issues and propose innovative solutions. Furthermore, you should be a collaborative team player capable of liaising effectively with geographically dispersed Technology teams.

• Data analysis and data modelling capabilities in order, to define KPIs and KRIs for key controls indicators.
• Automated Control Testing for Key controls against FIL Policies to report on control effectiveness.
• Preventive, Detective and Corrective Control Measures to mitigate the operational and functional risk.
• Support in ITGC control testing and facilitation.
• Perform Management Review on Key controls on quarterly and bi-annually basis.
• Understanding on ISAE 3402/SOC 2, ISO 27001 Controls and its testing approach.
• Provide subject matter expertise and support for IT General Controls (ITGC) and management control testing, ensuring alignment with certification requirements.
• Collaborate with technology and business teams to ensure effective implementation of preventive, detective, and corrective controls. Act as a liaison between internal stakeholders and external auditors to facilitate successful audits and assessments.
• Act as a trusted advisor to business, technology, and non-technology teams on AI governance and assurance practices, aligned with ISO 42001 and FILs ethical AI principles.
• Coordination with various internal stakeholders, as well as the external auditors for successful audit programm.

• Graduate from reputed institute with 7+ years of experience and progressive working knowledge of ITGC/SOC 2 Audits, Governance, Risk and Compliance domain and associated technologies
• Strong understanding of Information Security control frameworks and standards like, AI 42001, ISO 27001, NIST and CoBIT etc.
• Ability to multi-task and prioritise workload.
• Able to drive the internal control assessment and testing with pro-active reporting and escalation to fix the non-compliances on timely manner.
• Commitment to high standards of excellence and integrity.
• Excellent verbal and written communicator, who can consistently deliver high quality work and engage and influence key stakeholders at all levels
• Ability to work as part of a team and contribute towards team goals, but equally able to work independently and deliver results.
• Process focused and should be able to deliver high quality documentation, Presentation, Reports and Dashboards using MS Office or other data visualisation tools like Power BI
• Added advantage to have professional certifications like AI 42001 LA, ISO 27001 LA, CRISC, CISA and CISSP.