IT Control Testing

Job Title: IT Control testing

About Us

“Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery.

WHY JOIN CAPCO?

You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.

MAKE AN IMPACT

Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.

#BEYOURSELFATWORK

Capco has a tolerant, open culture that values diversity, inclusivity, and creativity.

CAREER ADVANCEMENT

With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.

DIVERSITY & INCLUSION

We believe that diversity of people and perspective gives us a competitive advantage.

MAKE AN IMPACT

Requirements:

Job Title: IT control Testing

Experience

The Senior IT Controls Tester / Manager will play a key role in planning, leading, and overseeing independent controls testing activity across a broad technology and operational risk landscape. The role requires strong subject matter expertise in IT controls, sound risk judgement, and the ability to lead testing activity with credibility, consistency, and independence. The successful candidate will work closely with programme teams, control owners, technology stakeholders, and risk and assurance partners to ensure that closure decisions are supported by robust control validation and clear reporting.

Principal Responsibilities

• Lead the planning and execution of independent IT controls testing across key change programme.
• Define and oversee test scope, approach, and methodology to assess the design adequacy and operating effectiveness of key IT controls.
• Provide independent assurance over control environments across areas including access management, change management, cyber/security, resilience, infrastructure, SDLC, data, and operational controls.
• Assess programme closure readiness by validating that control requirements, remediation actions, and risk treatment commitments have been completed, evidenced, and are sustainable.
• Review and challenge management evidence, testing artefacts, and closure submissions to ensure conclusions are robust, objective, and traceable.
• Identify and evaluate control weaknesses, thematic risks, and residual exposures, and provide clear recommendations or closure positions.
• Prepare and present high-quality testing outputs, assurance papers, and management summaries for governance forums, senior stakeholders, and oversight committees.
• Escalate significant issues, testing exceptions, and material residual risks in a timely and appropriate manner.
• Drive consistency, quality, and audit readiness across testing documentation, workpapers, reporting, and evidence management.
• Provide guidance, oversight, and quality review for more junior testers or contributors, as applicable.
• Contribute to the ongoing enhancement of testing frameworks, assurance methodologies, templates, standards, and quality controls.
• Build strong working relationships across technology, risk, controls, audit, and programme delivery teams while preserving the independence of the testing function.

Requirements

To be successful in this role you should meet the following requirements:

• Significant experience in IT controls testing, technology risk, IT audit, internal controls assurance, or a related control assurance discipline.
• Strong knowledge of IT general controls and broader technology risk and control frameworks, including identity and access management, change control, cyber security, incident/problem management, resilience, infrastructure, SDLC, and data-related controls.
• Proven ability to lead control assessments covering both design effectiveness and operating effectiveness, including evaluation of remediation actions and closure evidence.
• Experience in independently challenging stakeholders and forming balanced, risk-based conclusions supported by clear evidence.
• Strong understanding of governance, risk management, and assurance expectations within large and preferably regulated organizations.
• Ability to manage multiple testing activities, priorities effectively, and deliver to tight timelines without compromising quality.
• Strong written and verbal communication skills, including the ability to present complex control issues to senior stakeholders in a concise and credible manner.
• Experience leading reviews, coaching team members, or providing quality assurance over testing outputs would be advantageous.
• Experience supporting major programmes, enterprise transformation, or closure governance activity is highly desirable.

Qualifications

• Bachelor’s degree or equivalent experience in Information Technology, Cybersecurity, Risk, Audit, or a related discipline.
• Professional certifications such as CISA, CRISC, CISSP, CIA, ITIL, or ISO 27001 are advantageous.

The role holder will demonstrate

• Strong independence, integrity, and professional judgement
• A well-developed risk and control mindset
• Credibility in stakeholder engagement and constructive challenge
• High attention to detail and strong quality discipline
• Leadership capability and confidence in complex delivery environments
• A pragmatic, evidence-based approach to assurance and decision support

Why join us

This role offers the opportunity to influence critical programme and closure decisions by providing robust, independent assurance across the technology control environment. You will operate at the intersection of risk, technology, and change, helping to strengthen governance, improve control outcomes, and support confident decision-making across strategic initiatives.