Associate - Technology Risk and Controls Test Senior Specialist

If you are a detail-oriented professional with a passion for risk management and compliance, join our dynamic team in the Testing Center of Excellence (TCoE) to navigate complex risk landscapes while making a pivotal impact in our firm's robust risk strategy.

As Compliance and Operations Risk Test Senior Specialist, your deep understanding of risk management and control evaluation will be instrumental in identifying and mitigating risks, thereby enhancing compliance and operational risk management. Your expertise in test execution with precision and accountability will ensure the seamless delivery of quality outcomes, ensuring alignment with the firm's highest risks. You will be responsible for assessing the control environment, identifying gaps, and driving remediation efforts to mitigate risk. Your analytical thinking and problem-solving skills will be crucial in breaking down complex business objectives into manageable tasks and activities. Your role will be integral in ensuring a cohesive and efficient testing framework, contributing to the seamless delivery of quality outcomes.

 

Job Responsibilities: 

• Understand and evaluate the assigned function's control environment with proven experience in assessing the adequacy, effectiveness and design of controls to ensure alignment with SOX, other regulatory frameworks & with the firm's risk priorities.

• Execute the testing processes with precision and accountability to assess the control environment, identify gaps and prepare robust documentation including process documents, process flows, and overview documents that support testing conclusions.

• Collaborate with Process/Control Owner, cross functional teams on testing schedule, obtain walkthrough of the process, document process changes, evidence gathering, analysis of potential issues and facilitate timely reporting.

• Play key role in issue validation, action plan quality and closure discipline by partnering with control owners to ensure remediation aligns with risk acceptance and compliance expectations.

• Lead walkthrough and other meetings with business owners fostering collaboration across engagements with minimal oversight.

• Read and interpret policies/standards/procedures to ensure accurate implementation of compliance requirements while continuously improving control evaluation methodologies and interpreting control ratings & metrics to strengthen the firm's compliance and operational risk management framework.

• Propose and implement improvements to current testing methods, contributing to the overall efficiency and effectiveness of the firm's risk management.

 

Required Qualifications, Capabilities and Skills:

• Bachelor's degree in technology, finance, or related field; or equivalent work experience. Minimum of 4 year of work experience in controls testing, audit, operational risk management within a technology risk & control environment

• Deep and broad understanding of cybersecurity and technology associated risks.  

• Subject matter expert in areas such as GRC, Identity and Access management, Data Protection, Software development, Technology Resiliency, Networking and Cybersecurity. 

• Demonstrated proficiency in advanced analytical thinking and problem solving skills particularly in regard to analyzing large data sets to identify exceptions or patterns and evaluating various aspects of a situation to identify key information.

• Proven ability to build strong partnerships with key stakeholders and collaborate with business & functional experts to recognize risks and gaps.

• Excellent organizational and time management skills - ability to remain flexible and productive through shifting priorities and deadlines.

• Excellent written and verbal communication skills with an ability to influence business leaders in a meaningful and actionable manner.

• Demonstrated expertise in MS Office applications, with advanced skills in Excel, Word, and PowerPoint highly recommended.

 

Preferred Qualifications, Capabilities and Skills:

• Minimum bachelor’s degree with at least 4+ years’ experience, preferably in technology risk management
• CRISC / CISA certification desirable

• Audit & control testing background / experience.

• Comfortable using Intelligent solutions like Alteryx, Tableau to support testing activities or metrics reporting.

• Ability to innovate, challenge the status quo and identify automation opportunities.