It Control Testing Jobs

Job Title: IT Control testing About Us “Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount . With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. WHY JOIN CAPCO? You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry. MAKE AN IMPACT Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services. #BEYOURSELFATWORK Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. CAREER ADVANCEMENT With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. DIVERSITY & INCLUSION We believe that diversity of people and perspective gives us a competitive advantage. MAKE AN IMPACT Requirements: Job Title: IT control Testing Experience The Senior IT Controls Tester / Manager will play a key role in planning, leading, and overseeing independent controls testing activity across a broad technology and operational risk landscape. The role requires strong subject matter expertise in IT controls, sound risk judgement, and the ability to lead testing activity with credibility, consistency, and independence. The successful candidate will work closely with programme teams, control owners, technology stakeholders, and risk and assurance partners to ensure that closure decisions are supported by robust cont

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Internal Audit Analytics Associate, you'll join the IT Internal Audit team within Finance to deliver data-driven, third-line assurance across Coinbase's global technology infrastructure and crypto-native products. You'll extract, analyze, and validate large datasets from internal systems to assess the design and operational effectiveness of IT and security controls. This role translates complex audit data requests into precise SQL-based extracts and actionable findings that directly support the audit team's control testing objectives. What you'll do: Execute in-depth data analysis to assess IT and security control effectiveness by writing complex, reusable SQL queries against Snowflake and other internal data platforms. Validate system and model changes by performing comprehensive testing of their compliance and performance impact, documenting results for relevant stakeholders. Produce accurate data extracts and reports from multiple sources, translating complex audit data requests into clear, actionable requirements and outputs. Test data ETL processes from upstream production systems into the data repository and from the repository into enterprise tools, validating completeness and accuracy at each stage. Design and enhance metrics dashboards to measure IT and security system performance and provide actionable insights to the Internal Audit team. Partner cros

About the role We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team. The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred). This role will be responsible for conducting comprehensive IT and cloud security audits, ensuring compliance with regulatory requirements, and enhancing our information security policies and procedures. Key Responsibilities -Conduct IT and cloud security audits across various domains, including IT General Controls (ITGC), Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments. -Assess compliance with relevant laws, regulations, industry standards, and organizational policies across both on-premises and cloud environments. -Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices. -Maintain thorough documentation of audit findings, risk assessments, security measures, working papers, audit program checklists, and evidence for internal and external reporting. -Validate ITGC, cloud security, and application-specific controls and manage audit documentation, risk assessments, evidence gathering, and control testing. -Follow up on audit findings and ensure timely closure of non-compliance and security issues identified during audits. -Manage and oversee third-party risk assessments and audits, ensuring robust security controls are implemented across traditional and cloud-based service providers. -Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions. -Conduct risk-based security assessments of internal, vendor, and third-party hosted environments, covering both traditional IT infrastructure and cloud

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta is searching for a SOX Senior IT Auditor to join its internal audit team and assist in the successful execution of Okta’s global SOX program. The ideal candidate is a self-motivated team player capable of overseeing IT general control and application control compliance walkthroughs and testing. Reporting to the SOX Program IT Manager, key operational responsibilities include: Perform SOX IT general control and application control walkthroughs and testing to determine whether internal controls over financial reporting are designed and operating effectively Actively follows and champions the SOX methodology with limited guidance Lead SOX IT auditors with confidence and help in their knowledge and development Able to pinpoint systemic causes of control breakdowns and the associated technical gap that generated or permitted the issue Review staff auditor work product and provide clear, actionable feedback to aid in their audit methodology understanding Identify opportunities, provide recommendations, and gain stakeholder agreement on root cause of issues and appropriate corrective actions Develop collaborative relationships with business and IT stakeholders Leverage technology in order to rationalize or automate control activities In addition to essential SOX responsibilities, individuals in this position are also responsible for assisting the Internal Audit team in risk-based operational audits Required Qualifications: BA/BS degree in accounting, finance

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Internal Audit Analyst on the Internal Audit team within Finance, you'll execute financial crime compliance audits end-to-end, covering planning, fieldwork, reporting, and remediation validation. Internal Audit is Coinbase's independent third line of defense, delivering objective assurance and practical recommendations that strengthen governance, risk management, and controls across the company. You'll partner with Compliance, Engineering, and Legal stakeholders to identify control gaps, evaluate risk, and drive findings to closure, helping Coinbase scale with confidence in a rapidly evolving regulatory environment. What you'll do: Execute end-to-end financial crime compliance audits, including scoping, risk and control assessments, walkthroughs, control testing, and drafting workpapers and reports that are clear, complete, and actionable. Own audit logistics and stakeholder engagement in a remote environment, tracking requests, open items, and testing status while maintaining proactive communication with cross-functional partners. Identify control gaps during fieldwork by performing root cause analysis, evaluating exception severity based on likelihood, impact, and regulatory exposure, and escalating where additional stakeholder outreach is required. Develop risk-based recommendations in collaboration with stakeholders, document management responses and action

We are looking for a curious, intelligent, and energetic Internal Audit Senior Specialist 2 to join the MongoDB Internal Audit team, reporting to the Senior Manager of Internal Audit, in a role to expand the capabilities and impact of our India Internal Audit pillar. This is a critical role on a team instrumental for making sure that the company has the right controls in place to enable scalable growth, with trust in mind. In this role, you will have a strong background in current accounting pronouncements, internal and external financial statements, and control-based audits. The ideal candidate will possess strong analytical skills, a high degree of attention to detail and a focus on building long term partnerships across the organization. We are looking to speak to candidates who are based in Gurugram for our hybrid working model. Responsibilities Work closely with Senior Manager of Internal Audit to implement and execute on the annual internal audit plan, which includes tests of design and effectiveness of internal controls over financial reporting as well as risk-based operational audits Work cross functionally with process owners across the Company to evaluate processes, to identify process deficiencies or enhancements, and ensure action is taken to address these Perform testing on behalf of management over the effectiveness of internal controls over operational, financial, and IT processes Assist in the preparation of internal audit updates to be presented to the management team, Chief Accounting Officer, CFO/COO, and Audit Committee on a semi-annual or quarterly basis Coordinate with external auditors on their annual plan including but not limited to the performance of process walkthroughs and control testing Assist with internal investigations as they arise Requirements 2+ years of accounting and auditing experience required, with Big 4 Public Accounting experience in the software space (SaaS and on-premise) preferred BA/BS in Account

About Pinterest: Millions of people around the world come to our platform to find creative ideas, dream about new possibilities and plan for memories that will last a lifetime. At Pinterest, we’re on a mission to bring everyone the inspiration to create a life they love, and that starts with the people behind the product. Discover a career where you ignite innovation for millions, transform passion into growth opportunities, celebrate each other’s unique experiences and embrace the flexibility to do your best work. Creating a career you love? It’s Possible. At Pinterest, AI isn't just a feature, it's a powerful partner that augments our creativity and amplifies our impact, and we’re looking for candidates who are excited to be a part of that. To get a complete picture of your experience and abilities, we’ll explore your foundational skills and how you collaborate with AI. Through our interview process, what matters most is that you can always explain your approach, showing us not just what you know, but how you think. You can read more about our AI interview philosophy and how we use AI in our recruiting process here . Pinterest’s Security team (Pinfosec) is seeking an IC14 Security Engineer - Security Governance, Risk & Compliance (GRC Senior Analyst) to support and strengthen our security governance and assurance programs. This role is ideal for someone who is detail-oriented, collaborative, and motivated by building scalable security processes that help the business manage risk effectively. Reporting to the Interim Head of Security Governance, Risk & Compliance, this individual contributor will partner closely with Security, Engineering, IT, Legal, Internal Audit, and other cross-functional stakeholders to help maintain and improve Pinterest’s security control environment. The role will contribute to core GRC activities including risk management, policy governance, control testing, audit support, awareness tracking, and internal risk assessmen

About the Team OpenAI’s Cyber team works to make frontier AI a decisive advantage for defenders. The Cyber Blue Team is an operator-led group focused on turning real defensive problems into better models, useful products, safe Codex workflows, and integrations with the security tools defenders already use. Our ambition is simple: Raise attacker cost. Lower defender toil. Prove it by defending OpenAI; scale it through the ecosystem. We are not setting out to build another SIEM or autonomous SOC. We want to build the AI reasoning and workflow layer that helps security teams investigate threats, create and validate detections, improve their controls, and respond with greater speed and confidence. About the Role We are looking for a Product Manager to help build a new generation of AI-powered cyber defense products. You will work closely with security practitioners, researchers, engineers, designers, internal security teams, customers, and technology partners to turn emerging model capabilities into products that solve meaningful defensive problems. This is an early-stage product role. The work will span product discovery, prototyping, evaluation, development, launch, and iteration. You will help the team identify where AI can create the most value for defenders and translate those opportunities into clear, usable, and trustworthy product experiences. Initial areas of focus may include: Detection engineering and detection-content development Threat hunting and investigation Security validation and control testing AI-agent and MCP runtime defense Integrations with security platforms and enterprise workflows Safe, governed assistance for incident response The specific roadmap will continue to evolve based on model progress, practitioner needs, internal learnings, and customer feedback. In This Role, You Will Work with security practitioners to understand high-value defensive workflows, recurring pain points, and opportunities for AI to materially improve outcomes. Help sh

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Technology Risk & Controls Senior Analyst operates as part of the second line Technology Risk & Controls function, working under the direction of the Technology Risk & Controls Lead. This role builds on core Analyst responsibilities, taking greater ownership of control testing, audit engagement, and stakeholder interaction. The Senior Analyst is expected to operate with increased independence, support junior team members, and contribute to improving the consistency and quality of the controls environment. This role supports the delivery of the controls assurance programme across Business Platforms and Corporate applications, with a strong focus on IT General Controls (ITGC), and SOX compliance, for ERP environments. The role is focused on executing high-quality control testing, audit support and remediation assurance activities in line with WPP standards and methodologies. The Senior Analyst works closely with Application and Control owners, Financial Risk & Control colleagues and auditors to evidence control performance, support audit readiness (including SOX 404

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Technology Risk & Controls Analyst operates as part of the second line Technology Risk & Controls function, working under the direction of the Technology Risk & Controls Lead. This role supports the delivery of the controls assurance programme across Business Platforms and Corporate applications, with a strong focus on IT General Controls (ITGC), and SOX compliance, for ERP environments. The role is focused on executing high-quality control testing, audit support and remediation assurance activities in line with WPP standards and methodologies. The Analyst works closely with Application and Control owners, Financial Risk & Control colleagues and auditors to evidence control performance, support audit readiness (including SOX 404) and contribute to a consistent, well-documented and sustainable control environment. What you'll be doing: Controls Assurance & Testing • Perform control design and operating effectiveness testing across ERP and corporate systems • Execute testing across key control areas (e.g. access management, change

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable

Our mission and customers: We are creating the freedom for SMEs to succeed by delivering Europe's leading finance workspace with banking at its core, augmented by financial tools. We are proud to be rated 4.8 on Trustpilot, based on 55,000+ reviews. Our culture puts customer satisfaction at the core of what we do, as proven by our Net Promoter Score of 75 (more about our culture here). Our journey: Founded in 2017 by Alexandre and Steve, Qonto has grown to 1,600+ Qontoers serving over 600,000+ customers across 8 European countries. We have been profitable since 2023, and we are just getting started. Our beliefs: We hire for skills and potential. With 80+ nationalities, 45% women, of which 56% of women in our leadership team, diversity isn't a program; It's who we are. We've built a discrimination-free hiring process because the best teams are built on merit. AI at Qonto: AI is deeply embedded in how we work (here) - Every Qontoer gets unlimited access to the best AI tools. We want people who experiment without waiting for permission, push AI beyond the obvious, know when to trust it, and when to question it. ------------------------------------------------------------------------------------------------------ Join us as our Internal Control Officer – Compliance to strengthen Qonto's second-line AML/CFT control framework as we complete our transition into a Credit Institution. You'll own the periodic control plans testing our sanctions, embargo and PEP screening, transaction monitoring, EDD, and suspicious transaction reporting (STR) processes across every market Qonto operates in. You will report to Jérémy, our Lead Internal Control. ➡️ What you'll do Own second-line AML/CFT compliance: cover sanctions/embargo/PEP screening, transaction monitoring, EDD, and STR across every market Qonto operates in. Run periodic control plans: design and execute end-to-end testing of these processes, checking alignment with the source of truth, internal policy, and regulatory requ

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About the Role: We're hiring a Technical Program Manager to lead the systems, data, and process work behind how we bill, recognize revenue, close the books, and prove our controls work. You won't be writing the code or drawing the architecture; you'll be deciding what gets built, in what order, and why it matters. This is a role for someone who wants to understand a business well enough to change how it runs: learning the objectives, processes, and system flows end to end, then shaping them into strategic technical programs with real owners, deliberate sequencing, and decisions that hold up under audit. You'll sit between Finance and Accounting on one side and Engineering, Data, and Product on the other, and you'll be accountable for making new revenue streams operable and auditable, from a pricing model on a slide to a billed invoice, a booked journal entry, and a control that passes testing. You'll report to the Lead Technical Program Manager for Data, Biztech & AI Transformation, within EPD. You'll get high-level direction and clear priorities from your manager, and independent ownership of how the work actually gets delivered

Who Are We HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools. HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including HALA Payments and HALA Logistics) and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations. Founded in 2017, HALA is currently licensed by the Saudi Arabian Central Bank. Objective We are seeking IT Audit Manager to join our team and lead audits across Information Technology, Cybersecurity, Business Continuity Management (BCM), and other technology-enabled business processes. The Senior IT Auditor will be responsible for planning and executing risk-based audits, evaluating the design and operating effectiveness of IT general controls (ITGCs), cybersecurity controls, technology governance, cloud environments, business continuity and disaster recovery capabilities, and regulatory compliance. The role also involves identifying technology risks and control deficiencies, assessing their impact on the organization, and providing practical recommendations to strengthen governance, enhance cyber resilience, improve operational effectiveness, and support compliance with applicable regulatory requirements and industry standards. Responsibilities Plan and execute risk-based IT audit engagements, including IT General Controls (ITGC), cybersecurity, cloud computing, digital platforms, data governance, business continuity management (BCM), disaster recovery (DR), third-party risk, and technology-enabled business processes. Perform audit planning activities, including risk assessments, audit scoping, control identification, and development of audit programs and testing procedures. Evaluate the design and operating effectiveness of IT controls, identify technolog