Technology Controls Testing

**Years of Experience**
- Overall: Min 8 years
- Relevant: Min 2 years (with Masters) and Min 4 years (with Bachelors)

**Essential Skills (Highly Proficient)**
- C++, Java, J2EE,.NET, Python, COBOL
- SQL/ PL SQL
- Testing of ITAC - Data Interface, Automated Reconciliation, Segregation of Duties (SOD), Key Reports, etc.
- IAM and Cyber risks
- Advanced Excel skills for data analysis
- DFD, Visio
- Intermediate skills using Macro/SQL/Adv. Excel for data analytics
- Knowledge of IT Risks & Controls and respective Standards/Frameworks (COBOL,ITIL)

**Qualification or Certifications**
- Must have either of CISA / CIA / CISM / CA / CPA
- Good to have CGEIT, COBIT, CISSP, CISM, CFE, CIPT, CRISC, and/or relevant certification is a plus.**
Education and Industry experience**
- Good to have 1 year of experience in a position responsible for the following:
- Supervising audit professionals performing the IT portion of the audit;
- Software Programming using Java/J2EE or.Net, and PL/SQL
- **Key Responsibilities**
- Everything you’ll do will come back to providing outstanding risk-and-control-review activities for our functions. Colleagues and stakeholders from diverse backgrounds will look to you for answers, so you’ll be a high-profile contact when it comes to resolving complex issues. As you build your knowledge and experience, you’ll become a credible advisor, influencing clients and engagement teams on resolutions that will impact the bank.
- Work on financial /operational risk reviews to identify and assess IT-enabled or automated controls. Collect and analyze data to detect unmitigated risks, identify deficient controls, duplicated effort, or non-compliance with laws, regulations, and management policies.
- Provide technical guidance and share knowledge with team members with diverse skills and backgrounds. Consistently deliver quality client services focusing on more complex, judgmental and/or specialized issues. Demonstrate technical capabilities and knowledge.
- Understand the bank's risk and control environment and recognize key performance drivers, business trends, and emerging technology and industry developments. Stay informed of general business and economic developments and their effect on the bank’s functions.
- Drive and support Automation of control assessment.
- Hands on experience into IT Assessments and GRC (Governance, Risk & Control)

**Purpose of the role**

To partner with the bank, to provide independent insurance on control processes and advise on improvements to ensure the efficiency and effectiveness of the bank’s internal controls framework.

**Accountabilities**
- Collaboration across the bank to maintain a satisfactory, robust, and efficient control environment through the execution of ad-hoc assessments and testing on the design and operational effectiveness of the internal controls, aligned to control policies and standards.
- Development of detailed test plans and procedures to identify weaknesses in internal controls and other initiatives aligned to the bank’s control framework to mitigate any potential risks and issues, prioritised by its severity to disrupt bank operations, potential losses, and reputational impact.
- Communication of key findings and observations to the relevant stakeholders and business units to improve overall control efficiency and provide corrective actions to senior managers. Collaboration with other control professionals to resolve complex issues and ensure consistent testing methodologies across the bank.
- Development of a knowledge centre containing detailed documentation of control assessments, testing on design and operational effectiveness of procedures, findings, and the distribution of material on internal controls to train and upskill colleagues within the bank.

**Analyst Expectations**
- Will have an impact on the work of related teams within the area.
- Partner with other functions and business areas.
- Takes responsibility for end results of a team’s operational processing and activities.
- Escalate breaches of policies / procedure appropriately.
- Take responsibility for embedding new policies/ procedures adopted due to risk mitigation.
- Advise and influence decision making within own area of expertise.
- Take ownership for managing risk and strengthening controls in relation to the work you own or contribute to. Deliver your work and areas of responsibility in line with relevant rules, regulation and codes of conduct.
- Maintain and continually build an understanding of how own sub-function integrates with function, alongside knowledge of the organisations products, services and processes within the function.
- Demonstrate understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
- Make evaluative judgements based on the analysis of factual information, paying attention to detail.
- Guide and persuade team members and communicate complex / sensitive information.